0.1.213

Harden shared app sign-in handoff (#2947)

* fix post-merge security guard failures

* chore: publish branch work in .agents/skills, packages/mobile-app (9 files)

* restore workflow skills and harden native auth parsing

* retain workflow skills after concurrent auth slice

* checkpoint concurrent auth and portal work

* fix targeted dispatch typecheck recovery

* fix targeted desktop identity recovery

* docs: clarify owned-path shipping workflows

* fix: address shared auth review findings

* fix: harden shared auth embed boundaries

* chore: publish branch work in .agents/skills, packages/desktop-app, packages/dispatch, … (13 files)

* fix: make mobile session validation failures observable

* fix: keep desktop identity oauth in broker session

* chore: align release metadata with main

* fix: read partitioned desktop identity cookies

* fix: scope desktop identity cookies by origin

* fix: harden workspace embed auth boundaries

* chore: cover core skill sync with changeset

* chore: trace workspace embed ticket consumption

* fix: harden desktop identity adoption

* fix: publish desktop sso user-agent matcher

* fix: honor shared auth device rollout controls

* fix: resolve workspace embed home URLs

* fix: retain mobile parent session during chat refresh

* fix: use ordinary Dispatch sign-in for desktop authority

* fix: serve Dispatch desktop completion

* fix: enable desktop shared auth by default

* fix: keep desktop shared auth opt-in by default

* feat: ship shared auth and chat surface updates

* fix: resolve mobile chat merge conflict

* fix: use Dispatch login for desktop authority

* chore: remove invalid cloud changeset

* fix: restore desktop shared auth default

* fix: harden shared app sign-in handoff

* fix: enable desktop shared auth by default