M2 audit: excise managed connectors and xAI media-gen tools

Managed connectors (grok.com MCP admin) removed root-and-branch:
- The managed-MCP fetch/injection pipeline is gone, including the whole
  kigi-shell-session-support crate (managed-config fetch client, gateway
  tool catalog + dispatch, header injection, refresh task), reactive
  managed re-auth, mcp_doctor's grok.com-source discovery, and the
  [managed_mcps] config surface.
- TUI: the 'Managed by grok.com' section, connectors URL/deep-link,
  Action::OpenManagedConnectors, and session_team_id are gone. Local MCP
  management (list/toggle/add/remove/auth/tools) is fully intact.
- Kept as LOCAL policy: managed-settings.json MCP allow/deny enforcement,
  the multi-source local MCP merge, folder-trust gating. PluginOrigin
  Project/User labels kept (they tag locally discovered plugin dirs).

imagine/media-gen tools (xAI image/video generation) removed:
- image_gen, image_edit, video_gen, image_to_video, reference_to_video
  implementations, registrations, ToolKind/ToolInput/Output variants
  (serde-safe), config plumbing end to end, ZDR video machinery,
  /imagine + /imagine-video commands and guidance text, the bundled
  imagine skill (added to legacy cleanup so user installs delete it),
  and the media-gen render path.
- Kept: image INPUT (paste/attach, [Image #N] meta, pdf/image fetch,
  clipboard wrap), generic media-ref rendering, and the generic tool
  401-retry machinery (tests renamed, assertions unweakened).
- deploy_app stays: it is a permanently-disabled local stub deploying
  nowhere.

121 files changed, 8 deleted. Gates: workspace check/clippy 0/0, fmt,
deny ok; suites green (tools 2554, shell 4862, tui 6608, workspace
1042). Remaining grok.com strings live only in the auth-method ids and
changelog archives (§9/M3 sweep).

crates/codegen/kigi-tui/src/app/acp_handler/tests/mcp.rs

@@ -50,9 +50,7 @@
                     tools: Vec::new(),
                     enabled: true,
                     source: "local".into(),
-                    wire_source: crate::views::mcps_modal::McpWireSource::Local,
                     plugin_name: None,
-                    is_managed_gateway: false,
                 },
             ]));
         }
@@ -520,9 +518,7 @@
                     tools: Vec::new(),
                     enabled: true,
                     source: "local".into(),
-                    wire_source: crate::views::mcps_modal::McpWireSource::Local,
                     plugin_name: None,
-                    is_managed_gateway: false,
                 },
             ]));
         }

crates/codegen/kigi-tui/src/app/acp_handler/tests/mod.rs

@@ -1818,7 +1818,7 @@ pub(super) fn make_mcps_modal_with_servers(
     state
 }
 pub(super) fn seed_owner_agent_with_open_modal(app: &mut AppView) {
-    use crate::views::mcps_modal::{McpServerDisplayStatus, McpServerInfo, McpWireSource};
+    use crate::views::mcps_modal::{McpServerDisplayStatus, McpServerInfo};
     let owner = app.agents.get_mut(&AgentId(0)).expect("owner present");
     owner.extensions_modal = Some(
         make_mcps_modal_with_servers(
@@ -1826,8 +1826,7 @@ pub(super) fn seed_owner_agent_with_open_modal(app: &mut AppView) {
                 McpServerInfo { name : "alpha".into(), display_name : None, status :
                 McpServerDisplayStatus::Initializing, tool_count : 0, auth_required :
                 false, tools : Vec::new(), enabled : true, source : "local".into(),
-                wire_source : McpWireSource::Local, plugin_name : None,
-                is_managed_gateway : false, }
+                plugin_name : None, }
             ],
         ),
     );