Grok and Gemini provider support with credential and routing improvements

Features

• Grok and Gemini providers: Added Grok (xAI) and Gemini as cloud LLM providers with full support across routing, validation, model-list endpoints, provider UI, job dispatch, and token tracking. Providers are now available for selection in agent settings and the web UI.
• Context policy tool list: Added a grouped context policy tool list with per-MCP-server toggles and Auxot Platform tool controls.
• Inference anti-corruption layer: Introduced an ACL layer to keep inference concerns isolated from the rest of the domain model.
• Single-turn dispatch: Agent jobs dispatched from the server now run with --max-turns 1, ensuring one LLM turn per server-initiated dispatch.

Improvements

• Extended system-health checks and token tracking to cover all cloud providers including Grok and Gemini.
• Enabled manual triggering of disabled cron jobs and improved the no-channel user experience.
• Strengthened the tools-by-code re-prompt loop in the connector with up to 3 retries and a channel fallback.
• Centralized dispatch_snapshot writes for cron jobs and fixed the debug panel display for cron job state.
• Populated the Auxot Platform tool group in agent settings from the discovery catalog.
• Overloaded providers are now skipped in ResolveOverloadFallback to improve routing resilience.

Fixes

• Fixed Gemini compatibility: normalized tool schemas, stripped empty argument objects, removed stream_options and other OpenAI-specific request extensions that Gemini rejects.
• Resolved anonymous credential injection so that anonymous_config.allow correctly overrides agents.allow_anonymous during tool dispatch.
• Persisted the Slack thinking indicator across the full agentic loop so it remains visible during multi-step runs.
• Fixed Grok and Gemini job routing to use the correct provider queue and resolved BaseURL from provider defaults.
• Fixed dynamic poller startup for newly registered cloud providers.
• Changed MCP tool handling to kill rather than deny on cancellation to avoid stuck tool states.
• Fixed pass() suppression in cron script preface and added support for pass({ message }).
• Fixed a null preferred_model_id on agent creation by passing an empty string instead of NULL.
• Renamed migration 112→113 to avoid a collision with the main branch migration sequence.

Internal

• Added integration tests covering credential resolution and turn policy enforcement.