v9.48.0

Minor release: adds the xAI Grok CLI provider, plus crash-safety and test-isolation fixes.

Added

• xAI Grok CLI as a first-class provider (#542). New grok provider (xai family): stdin dispatch (grok-exec.sh), detection, routing, doctor checks, fleet inclusion, and model-config catalog entries.

Fixed

• atomic_json_update recovers from a crashed lock holder (#557, #559). Records holder PID + timestamp and reclaims a stale lock (dead holder, or older than OCTO_LOCK_STALE_SECS, default 30s) via a race-safe grab-verify-restore that always respects a live holder. A SIGKILL/crash no longer leaves the lock behind to block every later caller.
• Running the unit suite no longer deletes tracked repo files (#563). test-hook-err-traps.sh pointed CLAUDE_PLUGIN_ROOT/CWD at the live checkout; a hook's path/glob (e.g. session-end.sh's CWD scan) could delete Makefile/LICENSE/GOALS.md/PRODUCT.md. Hooks now run against a disposable copy with a throwaway CWD/CLAUDE_PROJECT_DIR, guarded by a sentinel.
• Late tangle completions reconciled on their final status (#560): success detection reads the latest ## Status: line plus the blocker-output guard.
• Corrected a stale cache-key sanitization test assertion (#583).

Full detail in CHANGELOG.md. Verified: full suite 178/178 green on merged main.