Port upstream CodexBar 0.47.0

[Finesssee]

Port upstream CodexBar 0.47.0

Sync from steipete/CodexBar v0.46.0 → v0.47.0 (176 commits, 300 files upstream). Process documented in docs/PORTING.md (part of this PR). Sources pinned to tag v0.47.0. Zero upstream contact.

Ported

• Notion AI provider (Add Notion AI provider steipete/CodexBar#2552) — Business/Enterprise workspace allowance, rolling + billing-period windows with real month-end resets; cookie/workspace-id honored. New rust/src/providers/notion/, ProviderId + factory + icon + providers UI. 13 tests.
• XAI provider — developer-platform Management API (prepaid balance + daily USD spend), separate from consumer Grok; XAI_MANAGEMENT_API_KEY + Team ID workspace. 15 tests. Provider count 68.
• CLI hooks watch (Add codexbar hooks watch so hooks fire without the macOS app steipete/CodexBar#2536) — continuous polling, --interval (min 60), --provider, --json, transition detector (quota_low / quota_reached / quota_reset / provider_unavailable·recovered / refresh_failed, baseline-first, rate-limited). 32 tests.
• Low Power Mode (Add global low power mode steipete/CodexBar#2518) — default-off; automatic background refresh floored to 30 min (auto_refresh.rs scheduler), manual refresh immediate; FloatBar stale ticks floored too. Settings + bridge + 7 locale catalogs (734 keys).
• Cursor (Make Cursor extra usage optional steipete/CodexBar#2338) — on-demand extra usage follows shared optional setting; unsupported credits placeholder removed.
• Command Code (fix: persist Command Code browser sessions steipete/CodexBar#2564) — validated browser sessions persisted via CookieHeaderCache (401 → re-import → save).
• OpenCode Go (OpenCode Go local reader errors on SQLite open when opencode is idle (missing WAL files) steipete/CodexBar#2544) — idle WAL-mode local history read with no SQLite sidecar files (-wal/-shm never created).
• Real-calendar monthly pace (Add Notion AI provider steipete/CodexBar#2552) — Amp, MiMo, Doubao, Alibaba (+token plan), OpenCode Go monthly windows use real calendar minutes (RateWindow::calendar_month_window_minutes).
• z.ai/Kimi/Grok durations (windowMinutes missing on several providers silently disables pace/forecast (zai, kimi, grok, antigravity) steipete/CodexBar#2431) — verified rate-window durations populated; Grok intentionally unset; z.ai MCP 1-minute marker mapped to monthly sentinel.

Skipped (macOS-only or no counterpart — recorded for the record)

• iCloud/CloudKit sync + Sync/CloudSync* + config.json watcher (macOS/CloudKit).
• Keychain access/cache hardening, CredentialFileWriter 0600 perms (our DPAPI secure_file covers owner-only intent).
• Antigravity libproc ps-prompt hardening (macOS).
• z.ai menu chart ranges, menu-card recycling/flicker/compact-account SwiftUI churn, provider manifest/registry reorg (macOS SwiftUI / no counterpart).
• CurrencyExchange (no display-currency consumer; verdict with evidence in PR thread of branch).
• W5 Codex fork-parent discovery budgeting (fix: preserve fork accuracy during bounded Codex cost catch-up steipete/CodexBar#2525/cost-usage-scan thread spins at ~91% CPU on 0.46.0 despite #2452 bound — many-file corpora (3.5k files, 4.5 GB) steipete/CodexBar#2538) — no equivalent fork-parent sweep in our scanners (grep-verified).
• W7 pace layout tokens (Add menu bar pace layout tokens steipete/CodexBar#2540/Restore session pace / deficit as a menu-bar layout token steipete/CodexBar#2534) — no menu-bar layout-token layer in our tray (pace lives in cards already).
• Claude cold-boot Claude Auto shows Not fetched yet on startup until manual Refresh steipete/CodexBar#2493/Allow Claude Auto CLI on cold boot when Keychain is disabled steipete/CodexBar#2494 — deferred: upstream bug class is a macOS Keychain-gated background-availability policy our Auto path never implemented (fully mapped in branch audit).

Validation

• rust: 915 lib + 1 bin, 0 failed; tauri: 329; frontend: 217; clippy -D warnings workspace-wide; check-locale 734; scripts\local-check.ps1 exit 0.
• CLI smokes: hooks watch --interval 59 rejected (≥60 rule), usage --provider notion/xai resolve with clean auth guidance.
• CUA proof on fresh debug build (proof-047/*): Low Power Mode toggle visible + persists via settings (DPAPI-verified); Notion AI and xAI provider rows render in the Providers tab.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is enabled.}