Build cleanly with clang 23 and current Qt; give the lims desktop client a session

[Yaraslaut]

On a machine with clang 23 and Qt 6.11, cmake --build --preset linux-everything failed. This PR makes that build clean, with no CMake warnings, and fixes a lims GUI defect found while trying the result.

Changes

• clang 23's lifetime-safety analysis. -Weverything turns it on and -Werror makes it fatal; it fired in about 20 places in morph's headers and in Qt's generated moc code. None of the diagnostics is a defect:

  • suggestions to annotate declarations;
  • reports that existing MORPH_LIFETIMEBOUND contracts can't be verified;
  • false invalidations, e.g. push_back on a std::vector& parameter reported as a use of out after invalidating it.

  Three groups are suppressed, because -Wno-lifetime-safety alone leaves the suggestion and lifetimebound groups on: -Wlifetime-safety, -Wlifetime-safety-suggestions and -Wlifetime-safety-lifetimebound-violation. They go through _morph_clang_suppression_if_supported, so older clang, including CI's clang 22, is unchanged.

• QML module output directories. Qt warned at configure time that six modules had an OUTPUT_DIRECTORY that doesn't end in their target path, which stops qmllint from using the build tree as an import path. The modules are the ladder rungs, MorphForms and the forms demo. Each now writes to <binary dir>/<Uri>. The install step reads that location from the target property, so it follows the move.

• QTP0004 is set to NEW for the modules whose .qml files sit in a subdirectory: MorphForms, the forms demo and bank_gui. It is guarded for Qt versions that predate the policy.

• lims desktop client. Every mutating lims action refuses an empty principal, and ladder_lims_gui built its bridges without a session. So RegisterClient and every other write failed with "mutating action dispatched with an empty principal".

  • Nothing caught it: the presenter tests install a principal of their own, and the GUI smoke test dispatches nothing.
  • installDesktopSession() now lives in lims's gui_lib. main.cpp calls it in local mode.
  • A new test registers a client and a sample through a bridge set up the same way. Without the session, that test fails with the error above.

🤖 Generated with Claude Code

https://claude.ai/code/session_0141t3QdB4FkiHqiCX2M2eF2

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!