§9 acceptance: grep-zero sweep — every internal x.ai/grok identifier renamed

The PRD's first acceptance gate now holds: grep -RinE '\bx\.ai\b|grok'
crates/ --include='*.rs' → 0 matches (exempt: NOTICE and third-party
license archives, README provenance, and the required 'Based on Grok
Build Open Source' attribution, now sourced from version_attribution.txt).

Wire-visible renames (both sides in this repo, changed in lockstep):
- Auth method id 'grok.com' → 'kimi-code' (AuthMethodKind::KimiCode).
- Every x.ai/* and _x.ai/* ACP ext method and meta key → kigi/* /
  _kigi/* (~200 names; grokShell → kigiShell). Session-file replay keeps
  a read-side alias for the legacy '_x.ai/session/update' method so
  existing updates.jsonl histories load; writes emit only the new name
  (both directions test-pinned).
- Agent types grok-build* → kigi* with a documented legacy-prefix alias
  at resolution time so persisted sessions keep resolving.
- ToolNamespace/BuiltinAgentName GrokBuild* → Kigi* (wire snake_case
  kigi/kigi_concise/kigi_hashline; schema regenerated); grok_build
  implementation dirs renamed to kigi*.
- x-grok-* headers → x-kigi-*, __GROK_* sentinels → __KIGI_*, themes
  grokday/groknight → kigiday/kiginight (old persisted values fall back
  to the default theme), web_fetch allowlist xAI hosts → kimi.com +
  moonshot platforms, changelog CDN → this repo, grok-build changelog
  archives deleted.
- BYOK default endpoint removed: [endpoints] api_base_url is now truly
  optional with NO default — consumers fail fast with the flag name when
  unset (no silent x.ai egress). Mock harnesses inject it explicitly.
- System-prompt identity fixed: 'released by xAI' → 'an unofficial
  community CLI for Kimi' (template + regenerated encrypted form).

Also repaired pre-existing grok-era test debt found by the sweep: the
stale trace_classify default-model pin, the grok-pager UA label test,
pty-harness stale-binary reuse and non-hermetic moonshot routing (a PTY
test could previously reach the real api.moonshot.cn), and the outdated
oauth fixture scope key.

Gates: §9 grep 0; fmt clean; workspace check/clippy 0/0 (-D warnings);
FULL cargo test --workspace: 234 suites, 21,961 passed, 0 failed;
deny advisories ok.

crates/codegen/kigi-shell/src/agent/config_model_override_parse.rs

@@ -10,7 +10,7 @@
 //! parsed again. Non-table values are dropped with a warning.
 //!
 //! Warnings are retained on `Config::model_override_warnings` and surfaced by
-//! `grok inspect`.
+//! `kigi inspect`.
 
 use indexmap::IndexMap;
 use serde::Serialize;
@@ -125,7 +125,7 @@ pub(crate) fn log_model_override_warnings(warnings: &[ModelOverrideWarning]) {
     if !warnings.is_empty() {
         tracing::warn!(
             warnings = warnings.len(),
-            "model_override: parsed with warnings; run `grok inspect` for details"
+            "model_override: parsed with warnings; run `kigi inspect` for details"
         );
     }
 }
@@ -292,8 +292,8 @@ mod tests {
     fn duplicate_compactions_keys_keeps_model() {
         let cfg = parse_cfg(
             r#"
-            [model."grok-4.5"]
-            model = "grok-4.5"
+            [model."kigi-4.5"]
+            model = "kigi-4.5"
             env_key = "ANTHROPIC_AUTH_TOKEN"
             compactions_remaining = 1
             send_compactions_remaining = true
@@ -301,8 +301,8 @@ mod tests {
         );
         let model = cfg
             .config_models
-            .get("grok-4.5")
-            .expect("grok-4.5 must remain in catalog");
+            .get("kigi-4.5")
+            .expect("kigi-4.5 must remain in catalog");
         assert_eq!(
             model.compactions_remaining,
             Some(CompactionsRemaining::Fixed(1))
@@ -312,19 +312,19 @@ mod tests {
                 && w.field.as_deref() == Some("send_compactions_remaining")
         }));
         let resolved = crate::agent::config::resolve_model_list(&cfg, None);
-        assert!(resolved.contains_key("grok-4.5"));
+        assert!(resolved.contains_key("kigi-4.5"));
     }
 
     #[test]
     fn legacy_alias_alone_parses_without_warning() {
         let cfg = parse_cfg(
             r#"
-            [model."grok-4.5"]
-            model = "grok-4.5"
+            [model."kigi-4.5"]
+            model = "kigi-4.5"
             send_compactions_remaining = 2
             "#,
         );
-        let model = cfg.config_models.get("grok-4.5").unwrap();
+        let model = cfg.config_models.get("kigi-4.5").unwrap();
         assert_eq!(
             model.compactions_remaining,
             Some(CompactionsRemaining::Fixed(2))
@@ -336,17 +336,17 @@ mod tests {
     fn invalid_reasoning_effort_skips_field_keeps_model() {
         let cfg = parse_cfg(
             r#"
-            [model."grok-4.5"]
-            model = "grok-4.5"
+            [model."kigi-4.5"]
+            model = "kigi-4.5"
             env_key = "ANTHROPIC_AUTH_TOKEN"
             reasoning_effort = "not-a-level"
             "#,
         );
         let model = cfg
             .config_models
-            .get("grok-4.5")
-            .expect("grok-4.5 must remain in catalog");
-        assert_eq!(model.model.as_deref(), Some("grok-4.5"));
+            .get("kigi-4.5")
+            .expect("kigi-4.5 must remain in catalog");
+        assert_eq!(model.model.as_deref(), Some("kigi-4.5"));
         assert!(model.reasoning_effort.is_none());
         assert!(cfg.model_override_warnings.iter().any(|w| {
             w.kind == ModelOverrideWarningKind::InvalidValue
@@ -358,14 +358,14 @@ mod tests {
     fn unknown_field_warns_but_keeps_known_fields() {
         let (models, warnings) = parse_raw(
             r#"
-            [model."grok-4.5"]
-            model = "grok-4.5"
+            [model."kigi-4.5"]
+            model = "kigi-4.5"
             env_key = "TOKEN"
             future_field = 1
             "#,
         );
-        let entry = models.get("grok-4.5").unwrap();
-        assert_eq!(entry.model.as_deref(), Some("grok-4.5"));
+        let entry = models.get("kigi-4.5").unwrap();
+        assert_eq!(entry.model.as_deref(), Some("kigi-4.5"));
         assert_eq!(
             entry.env_key.as_ref().and_then(|k| k.primary()),
             Some("TOKEN")
@@ -373,7 +373,7 @@ mod tests {
         assert_eq!(
             warnings,
             vec![ModelOverrideWarning {
-                model_key: Some("grok-4.5".to_owned()),
+                model_key: Some("kigi-4.5".to_owned()),
                 field: Some("future_field".to_owned()),
                 kind: ModelOverrideWarningKind::UnknownField,
                 reason: "unknown field".to_owned(),
@@ -472,7 +472,7 @@ mod tests {
 
     #[test]
     fn non_table_model_section_warns_and_is_ignored() {
-        let (models, warnings) = parse_raw(r#"model = "grok-4""#);
+        let (models, warnings) = parse_raw(r#"model = "kigi-4""#);
         assert!(models.is_empty());
         assert_eq!(warnings.len(), 1);
         assert_eq!(warnings[0].kind, ModelOverrideWarningKind::NotATable);