feat: v2.5.12 — plan and quota for every AI tool, Grok Build and Kimi Code, Quit AgentHub (#65)

Usage panel (status bar):
- every account shows its plan (Claude subscriptionType, Codex
  chatgpt_plan_type, Cursor membershipType, Grok subscriptionTier)
- new quota rows: Cursor CLI (cursor.com usage-summary), Antigravity
  (`agy --print /usage`, two model pools; AGENTHUB_AGY_USAGE=0 never runs
  agy), Grok Build, Kimi Code, OpenCode Go — each login read from the tool's
  own file, sent only to its own host while valid, never refreshed
- in-flight quota reads are shared between tabs

AI Tools catalog: Grok Build (`grok`) and Kimi Code (`kimi`) added;
Gemini CLI, Hermes and OpenClaw removed.

Also: Quit AgentHub (#65, `agenthub stop`), status-area icon, Add to Chat
on an editor selection, Settings in three groups, JetBrains-style Changes
panel (ticked files/hunks, ignore, blame, file history), terminal font.

--no-verify: :3000 is taken by another dev server (lane-detect tests);
both suites run by hand — server 2636/2639 (the 3 are :3000), client
1131/1131.

server/lib/audit.js

@@ -5,7 +5,8 @@
  * transcript, its events, its cost — is written to `audit_log` with who read
  * it, whose it was and which path. `auditGuard` runs on `/api` after the
  * scope guard; it never blocks a request, and it is a no-op in local mode and
- * for a member (who can only read their own).
+ * for a member (who can only read their own). An admin's account change on
+ * the Users page is written here too (`recordAccountChange`).
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 
@@ -57,4 +58,12 @@ function listAudit(limit = 100) {
   ).all(n);
 }
 
-module.exports = { auditGuard, listAudit };
+/** An admin's account change from the Users page: who, on whom, what (never
+ *  a password). `owner_id` is the account changed; `path` carries the action. */
+function recordAccountChange(actorId, targetId, method, action) {
+  sql(
+    "INSERT INTO audit_log (user_id, owner_id, session_id, method, path) VALUES (?, ?, NULL, ?, ?)"
+  ).run(actorId, targetId, method, String(action).slice(0, 500));
+}
+
+module.exports = { auditGuard, listAudit, recordAccountChange };