BrowserOS Server - v0.0.153

• ci: cover the permissions the nightly's build and OTA callees declare (#2533) (704e732)
• ci: grant nightly call sites the permissions their workflows declare (#2532) (54021c3)
• chore: bump version (8afd28c)
• feat: agents never steal focus in BrowserClaw (#2531) (7d84824)
• feat: unify product installation identity (#2530) (16afe60)
• chore: sync internal-docs submodule (#2529) (a29358b)
• chore: bump agent extension version to 0.0.146.0 (#2528) (5ea943a)
• chore(release): update extension alpha feeds to 0.0.146.0 (8ce223b)
• chore: bump server version to 0.0.152 (#2526) (8b5511c)
• chore(release): snapshot browseros server alpha v0.0.152 (1c9bf11)