Issue 130: add GitHub CLI auth support

[rawkintrevo]

Closes #130

Summary

• Installs GitHub CLI in pi-basic and pi-web runner images.
• Adds GitHub CLI as an app-managed auth provider for Pi and Codex sessions.
• Materializes selected github-cli tokens to ~/.config/gh/hosts.yml and excludes that file from persistent home archives, so the auth UI remains the durable source of truth.
• Adds user/developer docs and a checked-in QA case for the GitHub CLI auth option.

Tests and QA

• node --test session-runner/lib/workspaceAuth.service.test.js session-runner/lib/workspaceArchives.service.test.js
• node functions/pi.service.test.js
• npm --prefix functions test
• npm --prefix session-runner test
• npm run test:frontend
• npm run docs:check
• npm run build
• Browser QA: e2e/qa/cases/auth-github-cli-token.json passed.
  • Screenshot: artifacts/qa/auth.github-cli-token/github-cli-token-modal.png
  • Result JSON: artifacts/qa/auth.github-cli-token/result.json
  • Console summary: artifacts/qa/auth.github-cli-token/console-summary.txt
  • Upload limitation: local artifacts are listed here because this PR creation path cannot attach screenshots.

Deployment / Image Rollout

• Deployed Functions to pi-agents-cloud: npx firebase deploy --only functions --project pi-agents-cloud.
  • api updated to revision api-00124-xuk.
  • reapIdleSessions updated to revision reapidlesessions-00112-zar.
• Rebuilt and pushed pi-basic: gcloud builds submit session-runner --project pi-agents-cloud --config session-runner/cloudbuild.pi-basic.yaml.
  • Digest: sha256:9f4ab4a48ed7c733f9157cb7bef3bbe8d07acd83bbacc718fc7734486bdb3660.
• Rebuilt and pushed pi-web: gcloud builds submit session-runner --project pi-agents-cloud --config session-runner/cloudbuild.pi-web.yaml.
  • Digest: sha256:ecd597d87c594eaef3cd2a31f636b3ae6db4d2003b481594eeb044b0e4c83955.
• Verified gh --version in pi-basic, pi-web, codex-basic, and codex-web with Cloud Build 0b14d401-a027-49f9-9334-074c0edfe78a.

[github-actions]

Visit the preview URL for this PR (updated for commit 3e0ee07):

https://pi-agents-cloud--pr131-130-install-github-c-8ai3sskk.web.app

_{(expires Thu, 09 Jul 2026 02:04:30 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: ad3a3866d5dcd316f5eca68b23f0ce7295063677}