Hand out descriptors a declaration could produce

`Operation::descriptor()` returned `&'static OpDescriptor`, and that lifetime
is the whole reason a build-time node is free and a run-time node is
impossible: only a compile-time literal can satisfy it, so no amount of
reading `ops/*.yaml` at startup could ever produce a descriptor the rest of
the application would accept. FR-PLG-2 says a bundled operation and a
third-party plugin are the same kind of thing, differing only in where the
file was found — and a lifetime outsiders cannot meet is exactly the second,
weaker format that requirement forbids.

So a descriptor is now owned and handed out as `Arc<OpDescriptor>`, with `Vec`
where it held `&'static` slices. `Arc` rather than a `&self`-borrowed
reference because the callers want to *keep* it: the develop panel collects
descriptors and then mutates the graph, and a borrow would tie the
descriptor's lifetime to a borrow of the operation it came from, which is the
one thing `&'static` was doing right.

The identifier newtypes deliberately did not follow. `ParamId` is `Copy`, is
compared in `match` arms against generated constants, is a map key in the
sidecar and history, and reaches Slint model rows; an `Arc<str>` there would
cost a refcount on every one of those and would take `match id { EXPOSURE =>
.. }` away from the generated code. They gain an interner instead, which is
honest about its lifetime rather than pretending to one — the set of ids is
bounded by deduplication and is process-lifetime by construction, because the
sidecar on disk names its parameters and an id has to stay resolvable for as
long as any edit naming it can be opened.

No behaviour changes. Every descriptor that was a `static` is a `LazyLock`
initialiser now, `Operation::helpers` borrows from `self` instead of being
`'static` so a future run-time node can own its list, and `Warp` and `Framing`
follow `Operation` so there is one shape rather than two.

The one place a descriptor is read per frame is `compose_full`, which takes
`descriptor().id` to prefix each active operation's uniforms, and `dr-ui`
composes on every frame it draws. That is a dozen atomic increments beside a
composition that is already building several kilobytes of WGSL on the same
call; it is noted at the trait method rather than left for a profiler to find.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

core/dr-pipeline/src/ops/capture_sharpen.rs

@@ -124,6 +124,7 @@
 //! would be a guess dressed as a number; `resolves` is the line the stage
 //! already draws, and drawing it in two places differently is worse than a
 //! visible step.
+use std::sync::{Arc, LazyLock};
 
 use crate::descriptor::{
     Attribute, LocalizedKey, OpDescriptor, OpId, ParamDescriptor, ParamId, Scale, Unit,
@@ -163,46 +164,48 @@ const MAX_KERNEL: f32 = 48.0;
 /// every editor's capture sharpening starts.
 const DEFAULT_RADIUS: f32 = 1.0;
 
-static DESCRIPTOR: OpDescriptor = OpDescriptor {
-    id: ID,
-    label: LocalizedKey("op.capture_sharpen"),
-    params: &[
-        // Amount carries the neutral, which is why it is first: the operation
-        // is off when this is zero regardless of the other two, so a reset is
-        // one control and the panel's ordering matches the way it is used.
-        ParamDescriptor::amount("amount", "param.amount"),
-        // In **source pixels** — see the module documentation. Half a photosite
-        // is the smallest radius that means anything on a Bayer sensor, and
-        // three is already past the point where an unsharp mask is sharpening
-        // rather than adding local contrast; a photographer wanting the latter
-        // wants clarity, which is a different operation with a different unit.
-        ParamDescriptor::scalar(
-            "radius",
-            "param.radius",
-            0.5,
-            3.0,
-            DEFAULT_RADIUS,
-            Unit::None,
-            Scale::Linear,
-            2,
-        ),
-        // A fraction, but declared as a scalar rather than through
-        // `ParamDescriptor::fraction` for its precision alone: four decimal
-        // places on a control whose whole useful travel is a dozen steps
-        // reads as noise, and invites fiddling with digits that do nothing.
-        ParamDescriptor::scalar(
-            "threshold",
-            "param.threshold",
-            0.0,
-            1.0,
-            0.0,
-            Unit::None,
-            Scale::Linear,
-            2,
-        ),
-    ],
-    attributes: &[Attribute::Detail],
-};
+static DESCRIPTOR: LazyLock<Arc<OpDescriptor>> = LazyLock::new(|| {
+    Arc::new(OpDescriptor {
+        id: ID,
+        label: LocalizedKey("op.capture_sharpen"),
+        params: vec![
+            // Amount carries the neutral, which is why it is first: the operation
+            // is off when this is zero regardless of the other two, so a reset is
+            // one control and the panel's ordering matches the way it is used.
+            ParamDescriptor::amount("amount", "param.amount"),
+            // In **source pixels** — see the module documentation. Half a photosite
+            // is the smallest radius that means anything on a Bayer sensor, and
+            // three is already past the point where an unsharp mask is sharpening
+            // rather than adding local contrast; a photographer wanting the latter
+            // wants clarity, which is a different operation with a different unit.
+            ParamDescriptor::scalar(
+                "radius",
+                "param.radius",
+                0.5,
+                3.0,
+                DEFAULT_RADIUS,
+                Unit::None,
+                Scale::Linear,
+                2,
+            ),
+            // A fraction, but declared as a scalar rather than through
+            // `ParamDescriptor::fraction` for its precision alone: four decimal
+            // places on a control whose whole useful travel is a dozen steps
+            // reads as noise, and invites fiddling with digits that do nothing.
+            ParamDescriptor::scalar(
+                "threshold",
+                "param.threshold",
+                0.0,
+                1.0,
+                0.0,
+                Unit::None,
+                Scale::Linear,
+                2,
+            ),
+        ],
+        attributes: vec![Attribute::Detail],
+    })
+});
 
 /// TRACES: FR-DEV-3
 /// Capture sharpening: a separable unsharp mask with a contrast threshold.
@@ -275,8 +278,8 @@ impl CaptureSharpen {
 }
 
 impl Operation for CaptureSharpen {
-    fn descriptor(&self) -> &'static OpDescriptor {
-        &DESCRIPTOR
+    fn descriptor(&self) -> Arc<OpDescriptor> {
+        DESCRIPTOR.clone()
     }
 
     fn set_param(&mut self, id: ParamId, value: f32) {