chore(sync): merge main and mobile-main into dev

[DIYgod]

Summary

• merge released desktop changes from main into dev
• merge released mobile changes from mobile-main into dev
• replace the failed direct-push sync runs with a reviewable PR so protected branch checks can pass

Context

This PR manually applies the sync that failed in runs 22995713041 and 23004205636 because dev now requires status checks before update.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 82b5791950

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Restore Electron token fallback for initial session fetch

Providing followApi directly here removes the Electron-specific auth.getSession override that previously called ipcServices.auth.getSessionByToken(getAuthSessionToken()) before falling back to HTTP. The login/register flow still sets the cookie asynchronously (setElectronSessionToken(token) is fire-and-forget in modules/auth/Form.tsx) and then immediately reloads (handleSessionChanges), so the first post-login api().auth.getSession() can run before the cookie is persisted. In that window Electron now gets a 401 and treats the user as unauthenticated, which can surface as intermittent post-login failures/loops.

Useful? React with 👍 / 👎.