feat(client): per-document reactive subscription (doc_subscribe), drop polling

Expose subscribeDoc(nuri, onChange) / subscribeDocs(nuris, onChange) wrapping the
real ng.doc_subscribe — per-document, event-driven (initial State + a Patch per
commit, local or broker-synced from a remote peer), returning a sync unsubscribe.
subscribeDocs isolates per doc (a failing/unsynced doc never aborts the others),
so it sidesteps the ORM fan-out hang (never orm_start_graph(graphs:[…])).

Replace the setInterval polling in inbox.watch() and discovery.watchIndex() with
doc_subscribe — same public contract, now push not poll. NextGraph is subscription-
first; no polling remains.

Verified against the real broker (@data harness spike): the doc_subscribe callback
marshals across the iframe RPC (@ng-org/web strips the callback and drives it via a
MessagePort — no DataCloneError) and fires on the initial push and on a real write.
Lib bun test 91 pass, tsc clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/client/test/inbox.test.ts

@@ -57,6 +57,25 @@ function unescapeLiteral(s: string): string {
 function makeFakeNg() {
   const quads: Quad[] = [];
 
+  // Reactive subscriptions: doc_subscribe registers a callback per anchor and
+  // fires an initial State push; a matching sparql_update pushes a Patch to that
+  // anchor's subscribers. This mirrors the real broker's local-push behaviour so
+  // inbox.watch (now event-driven, no polling) can be tested without a timer.
+  const subs = new Map<string, Set<(r: unknown) => void>>();
+  const doc_subscribe = mock(async (nuri: string, _sid: unknown, cb: (r: unknown) => void) => {
+    let set = subs.get(nuri);
+    if (!set) {
+      set = new Set();
+      subs.set(nuri, set);
+    }
+    set.add(cb);
+    queueMicrotask(() => cb({ V0: { State: { doc: nuri } } })); // initial push
+    return () => set!.delete(cb);
+  });
+  const pushTo = (anchor: string): void => {
+    for (const cb of subs.get(anchor) ?? []) cb({ V0: { Patch: { doc: anchor } } });
+  };
+
   const doc_create = mock(async (..._a: unknown[]) => "did:ng:o:new");
 
   // Parses one deposit: `<subj> a <Deposit> ; <payload> "..." ; <ts> "..." [; <from> "..."] .`
@@ -89,6 +108,9 @@ function makeFakeNg() {
       const o = rawLit !== undefined ? unescapeLiteral(rawLit) : (m[3] ?? "");
       quads.push({ g, s, p, o });
     }
+    // A write to `g` (the anchored default graph) pushes a Patch to that doc's
+    // subscribers — the local-push the real broker performs on a verified commit.
+    pushTo(g);
     return undefined;
   });
 
@@ -121,7 +143,7 @@ function makeFakeNg() {
     return { results: { bindings } };
   });
 
-  return { doc_create, sparql_update, sparql_query, _quads: quads };
+  return { doc_create, doc_subscribe, sparql_update, sparql_query, _quads: quads };
 }
 
 const SESSION: RegistrySession = { sessionId: "sid-1", privateStoreId: "PRIV" };