feat: v2.5.12 — plan and quota for every AI tool, Grok Build and Kimi Code, Quit AgentHub (#65)

Usage panel (status bar):
- every account shows its plan (Claude subscriptionType, Codex
  chatgpt_plan_type, Cursor membershipType, Grok subscriptionTier)
- new quota rows: Cursor CLI (cursor.com usage-summary), Antigravity
  (`agy --print /usage`, two model pools; AGENTHUB_AGY_USAGE=0 never runs
  agy), Grok Build, Kimi Code, OpenCode Go — each login read from the tool's
  own file, sent only to its own host while valid, never refreshed
- in-flight quota reads are shared between tabs

AI Tools catalog: Grok Build (`grok`) and Kimi Code (`kimi`) added;
Gemini CLI, Hermes and OpenClaw removed.

Also: Quit AgentHub (#65, `agenthub stop`), status-area icon, Add to Chat
on an editor selection, Settings in three groups, JetBrains-style Changes
panel (ticked files/hunks, ignore, blame, file history), terminal font.

--no-verify: :3000 is taken by another dev server (lane-detect tests);
both suites run by hand — server 2636/2639 (the 3 are :3000), client
1131/1131.

server/openapi-extra/lanes.js

@@ -595,6 +595,28 @@ const paths = {
       },
     },
   },
+  "/api/lanes/{id}/git/blame": {
+    get: {
+      tags: ["Lanes"],
+      summary: "Annotate: each line's last commit",
+      description:
+        "`git blame --porcelain` of the working-tree file, for the Changes panel's Annotate gutter. Same lexical lane guard and secret refusal as /git/file, capped at 1 MB. A line nobody committed yet is null. An untracked file (no history) answers {available:false}. Read-only, no same-origin guard.",
+      operationId: "blameLaneFile",
+      parameters: [
+        { name: "id", in: "path", required: true, schema: { type: "integer" } },
+        { name: "path", in: "query", required: true, schema: { type: "string" } },
+      ],
+      responses: {
+        200: {
+          description:
+            "{available, path, commits: {<sha>: {short, author, date, summary}}, lines: [<sha>|null]}.",
+        },
+        400: { description: "EBADPATH, ENOFILE or ETOOBIG." },
+        403: { description: "ESECRET." },
+        404: { description: "Lane not found." },
+      },
+    },
+  },
   "/api/lanes/{id}/git/raw": {
     get: {
       tags: ["Lanes"],
@@ -742,6 +764,7 @@ const paths = {
               "revert",
               "undo-commit",
               "amend",
+              "ignore",
             ],
           },
         },
@@ -782,13 +805,29 @@ const paths = {
                 paths: {
                   type: "array",
                   items: { type: "string" },
-                  description: "stage, unstage, discard; each must be a path git reports changed.",
+                  description:
+                    "stage, unstage, discard, ignore (untracked only, else 400 ETRACKED; appends an anchored line to the workspace's .gitignore); each must be a path git reports changed. commit and amend: commit exactly these files' working-tree content (`git commit --only`), an untracked one included, leaving every other change — staged or not — uncommitted; a conflicted one is 409 ECONFLICTS. amend with an empty list rewords only (a message is then required, else 400 ENOCHANGES).",
                 },
                 path: {
                   type: "string",
                   description:
                     "stage-hunk, discard-hunk; a path git reports changed (not untracked).",
                 },
+                hunks: {
+                  type: "object",
+                  additionalProperties: {
+                    type: "array",
+                    items: {
+                      type: "object",
+                      properties: {
+                        hunk: { type: "string" },
+                        blocks: { type: "array", items: { type: "integer" } },
+                      },
+                    },
+                  },
+                  description:
+                    "commit, amend (optional): the hunk-level commit — per tracked, non-renamed path, only these change blocks of these hunks (`@@` lines as the diff at `context` returned them). Built in a temporary index from git's own fresh diff and committed from it; the real index entries of the committed paths are then reset to the new HEAD, the rest of a partial file left as an unstaged change. A hunk no longer in the diff is 409 EHUNKGONE, an untracked path 400 EUNTRACKED, a bad shape 400 EBADPATH.",
+                },
                 hunk: {
                   type: "string",
                   description: