Merge upstream cita-777/main into linuxroc/main

Brings in 8 upstream commits:
- fix: Claude anthropic model discovery fallback (cita-777#554)
- chore(deps): minor-and-patch group bumps (14 deps)
- chore(deps): marked 17 -> 18
- chore(deps-dev): electron 41 -> 42
- chore(deps-dev): react-router-dom 7.14 -> 7.15
- chore(deps): undici 6.24 -> 6.25 (runtime-http group)
- chore(deps-dev): build-tooling group
- chore(deps): github-actions group

Conflict resolution:
- src/server/services/platforms/claude.ts (content conflict)
- src/server/services/platforms/claude.test.ts (add/add conflict)

Both conflicts were resolved with --ours: the local fork's
implementation of the Claude model discovery fallback (commit 4ecf3f3,
"feat(claude-models): fall back to parent /v1/models when
/anthropic/v1/models is empty") is a strict superset of upstream PR
cita-777#554. Specifically, the local fork:

- reuses CLAUDE_DEFAULT_ANTHROPIC_VERSION from oauth/claudeProvider.js
  rather than re-hardcoding the literal '2023-06-01' string (single
  source of truth).
- exposes pure URL helpers (isAnthropicSuffixedBaseUrl,
  stripAnthropicSuffixSegment) on standardApiProvider.ts with 34
  parameterized unit tests covering case variants, trailing-slash,
  query/port preservation, host-only and /anthropic-proxy negatives.
- emits two info-level diagnostic logs ([claude-models-fallback]
  intent / hit) with token-free site labels for operator visibility.
- absorbs underlying errors from BOTH the standard and the fallback
  call so getModels() never throws a network/HTTP error to the caller.
- carries 27 integration tests via a node:http fixture covering every
  failure mode and zero cross-call state.

Verification:
- npm run typecheck:server: clean
- npm run build:server: clean
- npm run repo:drift-check: 0 new violations (5 pre-existing tracked)
- src/server/services/platforms/{claude,standardApiProvider,llmUpstream}.test.ts: 70/70
- session-stick-routing-binding-timing-fix suites: 72/72

Author: luop

.github/workflows/backfill-pr-labels.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Backfill PR labels
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const owner = context.repo.owner;

.github/workflows/docs-pages.yml

@@ -45,7 +45,7 @@ jobs:
         uses: actions/configure-pages@v6
 
       - name: Upload pages artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: docs/.vitepress/dist
 

.github/workflows/labeler.yml

@@ -20,7 +20,7 @@ jobs:
           sync-labels: false
 
       - name: Apply size label
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const owner = context.repo.owner;

.github/workflows/release.yml

@@ -277,7 +277,7 @@ jobs:
         run: ls -la release-assets
 
       - name: Upload Release Assets
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ github.ref_name }}
           generate_release_notes: true