Synced from monorepo

Changes:
- grok-shell: request workspaces:read/write OAuth2 scopes
- security: fix SSRF bypass via HTTP redirect in hook runner
- fix(grok-build): enterprise STT WSS URL + API-key voice bearer
- Harden identity-change purge and sync-marker invariants
- sandbox + workspace-server: delete the legacy ready-file arm
- Show billing URL when browser cannot open
- fix(pager): show folder-trust UI in minimal mode
- fix(pager): drain task_backgrounded before no-wait headless exit
- grok-agent-sdk: stop SDK-spawned agents from staging self-updates they can never adopt
- Split settings_modal into directory module
- Delegate VS Code SSH file links
- grok-shell: release the workspace session binding when a session is removed
- keep skills reachable when their name collides with a client builtin
- Preserve semantic link targets

Cargo.lock

@@ -13270,7 +13270,7 @@ dependencies = [
 
 [[package]]
 name = "xai-grok-pager"
-version = "0.1.220-alpha.4"
+version = "0.2.101"
 dependencies = [
  "agent-client-protocol",
  "ansi-to-tui",
@@ -13359,7 +13359,7 @@ dependencies = [
 
 [[package]]
 name = "xai-grok-pager-bin"
-version = "0.1.220-alpha.4"
+version = "0.2.101"
 dependencies = [
  "anyhow",
  "clap",
@@ -13618,7 +13618,7 @@ dependencies = [
 
 [[package]]
 name = "xai-grok-shell"
-version = "0.1.220-alpha.4"
+version = "0.2.101"
 dependencies = [
  "agent-client-protocol",
  "anyhow",
@@ -14009,7 +14009,7 @@ dependencies = [
 
 [[package]]
 name = "xai-grok-version"
-version = "0.2.0-dev"
+version = "0.2.101"
 dependencies = [
  "semver",
 ]