v1.25.2 — Upstream sync preserving the fork UI

Sync upstream through ee79a79 while preserving CPAMC++ design, custom providers, monitoring, private instructions, model context, and the fork's v0 management API contracts.

• Support canonical API configuration paths in the existing visual editor while preserving YAML comments, provider groups, and legacy aliases.
• Fix auth refresh loading races, forward auth identity, and avoid retaining refresh credentials in the UI.
• Use configured proxies for model discovery and connection checks; preserve model aliases and explicit cooling settings.
• Improve Kimi quota domain handling, quoted log parsing and persistent filters, dropdown keyboard behavior, and plugin logo fallback.

Upstream dashboard/logs redesigns, promotional content, and unproven replacement features were excluded.

Validation: 444 tests passed; lint, TypeScript, and production build passed. Two read-only preservation audits approved the staged merge. Browser checks against the API fork passed for config loading, auth refresh races, logs fullscreen behavior, and provider navigation.