v1.2.0 - Cleaner first-day setup flow

Highlights

• Default onboarding now uses direct tool selection; profiles remain dormant/manual.
• Removed the generated access-request helper flow; access requests are drafted in conversation only when requested.
• Improved first-day handover with clearer MCP configuration status, setup priority, and read-only smoke-test reminders.
• Added safer local auth helpers for Drive/Gmail token refresh and BigQuery short-lived bearer-token fallback.
• Clarified reset behavior so real onboarding keeps working credentials, while tests and handoffs can reset cleanly.

Release Checks

• Confidentiality scan: no personal credentials, local PC paths, or test-client strings found in tracked reusable files.
• Validate: passed.
• TestFixtures: passed.
• ReleaseAudit: passed.