chore: promote dev to main (upstream sync, v1.0.36)

[LeXwDeX]

Closes #465

Summary

Promote dev to main: upstream sync (sst/opencode) merged via PR #462, 55 commits / 79 files (+3448/−423), prereleased as graphagent-v1.0.36-dev.1.

Changes

• LLM pipeline: model defaults & compatibility data, tool schema projections, request precedence, response reducer, event reducer law tests
• Provider transforms: Bedrock reasoning cache filtering, openai-compatible textVerbosity guard, DeepSeek/Mistral/Gemini/MiniMax/Grok/sonnet-5 sampling defaults, xAI store default, Azure reasoningEffort
• Retry: network error variants, xAI capacity errors, retry cap with jitter
• Core: unicode grep previews, MCP timeout split (timeout.startup/timeout.request), FSUtil.ensureDir AlreadyExists tolerance, git-only file watch, home-relative permission path expansion, external read path authorization, remote skill refresh
• Server: upstream 5xx body logging, host-directory forwarding fix, oversized websocket request fallback
• ACP/TUI: enriched permission prompts, ssh set-clipboard copy, up-arrow subagent menu exit
• Chore: unknown config fields ignored, untrack .specgit.yaml

Verification evidence

Local gates (this machine, dev HEAD 6a2eb2004e):

Gate	Result
bun typecheck (opencode + llm)	PASS
packages/opencode targeted unit tests (13 files touching changed areas)	651 pass / 0 fail
packages/llm full unit tests	309 pass / 0 fail
bun run test:dag-core	52 pass / 0 fail, coverage floors met

Runtime smoke (source boot, isolated fixture project):

Check	Result
CLI boot (--version, --help)	PASS
Provider registry (models, 13 models)	PASS
Config: unknown fields ignored, V1 numeric MCP timeout + experimental.mcp_timeout migrated	PASS
MCP timeout split live: fake local server timed out at exactly the configured 5000ms	PASS
opencode serve + HTTP API (166 routes, /agent ×13, /dag, /mcp health)	PASS
Unicode grep preview (CJK intact, byte offsets correct)	PASS
DAG command family registered (dag-auto, create-dag-workflow in /command ×66)	PASS
Session create API	PASS
TUI boot (process stable, no crash)	PASS

Environment note: TUI-from-source failed with Cannot find package 'react' — reproduced identically on main (keymap react peer never installed locally; bun.lock untouched by this sync). Not a regression from this promotion.