Integrate upstream Mac provider fixes through c9e7f4df5

[ColumbusLabs]

Upstream range

Accounts for steipete/CodexBar 100deb6faeeaa97f179845ef0591cb9b1102639e..c9e7f4df556d914e4652e21fcb30ee9f3845a0b2.

Adopted and adapted product slices:

• Claude web cookie refresh and no-UI Keychain preflight behavior
• OpenCodex pricing and aggregation performance
• Gemini consumer shutdown detection and safe account switching
• Warp merged main-plus-bonus lane rendering

Rejected upstream-only release bookkeeping:

• 971ba9d8c, 1835ccd21, 26958f73a
• a639fdf03, 20af94d71, fa50cf2dc, 061593ca1, c9e7f4df5

No superseded or deferred commits.

QuotaKit adaptations

• Preserves QuotaKit identity, watchdog, OAuth persistence, saturating cost aggregation, parser compatibility lineage, 69-provider catalog, and shared/mobile contracts.
• Keeps Gemini shutdown observation session-only and requires an explicit warning before credential removal.
• Excludes upstream release versions, appcast, proof assets, and binary distribution bookkeeping.
• Advances only UPSTREAM_MONITOR_BASE to the fully reviewed upstream head.

Verification

• git diff --check
• parser hash current: 6cacc110201e753e
• provider manifests current: 69 providers
• focused affected tests: 297 passed
• make test: 978 selections, 82/82 groups, zero failures/retries
• Scripts/lint.sh lint: zero violations; branding, locale, packaging, release-lane, manifest gates passed
• swift build -c release: passed
• independent adversarial review: no P0-P2 findings
• check_upstreams.sh: zero commits after c9e7f4df5

Real credentials, browser cookie stores, Keychain records, and live provider accounts were not probed.

Closes #145