Synced from monorepo

Changes:
- grok-shell: request workspaces:read/write OAuth2 scopes
- security: fix SSRF bypass via HTTP redirect in hook runner
- fix(grok-build): enterprise STT WSS URL + API-key voice bearer
- Harden identity-change purge and sync-marker invariants
- sandbox + workspace-server: delete the legacy ready-file arm
- Show billing URL when browser cannot open
- fix(pager): show folder-trust UI in minimal mode
- fix(pager): drain task_backgrounded before no-wait headless exit
- grok-agent-sdk: stop SDK-spawned agents from staging self-updates they can never adopt
- Split settings_modal into directory module
- Delegate VS Code SSH file links
- grok-shell: release the workspace session binding when a session is removed
- keep skills reachable when their name collides with a client builtin
- Preserve semantic link targets

crates/codegen/xai-grok-shell/Cargo.toml

@@ -1,14 +1,13 @@
 [package]
 license = "Apache-2.0"
 name = "xai-grok-shell"
-version = "0.1.220-alpha.4"
+version = "0.2.101"
 edition.workspace = true
 
 [features]
 default = []
 unstable = []
-default-bazel = [
-    ]
+default-bazel = []
 
 [dependencies]
 dunce = { workspace = true }
@@ -184,13 +183,9 @@ windows = { workspace = true }
 criterion = { workspace = true }
 filetime = { workspace = true }
 tempfile = { workspace = true }
-xai-grok-memory = { workspace = true, features = [] }
-xai-grok-workspace = { workspace = true, features = [] }
-# Feature-unification applies the signing seam to the lib when building tests, so
-# integration tests can inject a throwaway trusted key; production builds exclude
-# dev-deps and compile the seam out.
+xai-grok-memory = { workspace = true, features = ["test-support"] }
+xai-grok-workspace = { workspace = true, features = ["test-support"] }
 xai-grok-config = { workspace = true, features = [] }
-# Ed25519 signing for the managed-config signature tests.
 ring = { workspace = true }
 tar = { workspace = true }
 flate2 = { workspace = true }
@@ -199,7 +194,7 @@ semver = { workspace = true }
 serial_test = { workspace = true }
 # Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
 # this crate's test targets.
-xai-grok-shell-base = { workspace = true, features = [] }
+xai-grok-shell-base = { workspace = true, features = ["test-support"] }
 xai-grok-test-support = { workspace = true, features = [] }
 xai-test-utils = { workspace = true }
 # `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual