PTY random unit names

Always generate PTY transient-unit names from 128 random bits using the strict grammar opencode-pty-[0-9a-f]{32}.service; clients must never supply names. Chose random supervisor-owned names over bus-derived or caller-provided names because caller control enables injection and unsafe cleanup, while predictable shared identities increase collision and targeting risk.