fix(web-session): restore IME-safe composer input

ci: use OIDC for npm publishing

feat(sync): persist shared project and session ordering

fix(web-session): add missing mobile composer scroll helpers

feat(file-manager): add recursive file search

feat(web-session): add Codex skill browser and CodeMirror composer

feat(ui): show project initials in session badges

feat(web-session): notify only when re-clicking the active draft

perf(api): optimize static asset cache headers

style(web-session): flatten sidebar session markers