v0.12.1 — MR evidence reporting fix

Fixed

• Separate local Git inspection from CLI discovery and forge preflight calls.
• Distinguish pending/rejected requests from executed CLI failures and unverified authentication.
• Do not infer CLI/keyring authentication failure from anonymous HTTP login pages.
• Preserve confirmed host/repository/MR identifiers in commands and suggestions.

Permissions, dependencies and OpenCode compatibility unchanged.

Verification: 638 tests, lint/typecheck, build, sync/package/release gates, 4 e2e tests and Linux/macOS CI passed. Prompt and metadata review APPROVE.

PR: #14