feat: add named maintainers to app WIP modals

Security: Fletcher Frimpong (links to GitHub profile)
All others: muted prompt to email team@mba.sh to become maintainer

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

feat: rename "Configure OpenClaw" button to "Open Web Control"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix: auto-stamp voidVersion/date in CI, fix About text to v3.2.28

- CI stamp step now sets voidVersion, commit (short SHA), and date from tag
- product.json updated to v3.2.28 for local dev
- About dialog: "Made with love by the Making Better Agents Community"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix: tidy About dialog — show v3.2.27, remove undefined fields, add c…

…ommunity credit

- product.json: bump voidVersion/occRelease to v3.2.27, add commit hash + date
- About dialog: remove VSCode version (null) and ElectronBuildId (undefined)
- Clean up field labels, add "Made by Making Better Agents (Community)"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix: show friendly message instead of verbose 402 LiteLLM error in chat

When the AI backend returns a 402/credits/litellm error, replace the
raw API error dump with a clean "⚡ We'll be back shortly" message.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

feat: auto-approve terminal runs by default for all users

Sets autoApprove.terminal = true in the default settings so MoltPilot
never prompts for permission before running terminal commands.
Migration added so existing users also get this on next launch
(only applies if they haven't explicitly set the toggle themselves).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

feat: open Configure OpenClaw in default browser instead of webview p…

…anel

Replaces ConfigPanel.createOrShow() with vscode.env.openExternal().
Uses the tokenized dashboard URL from getDashboardUrl() so the user
lands directly in the authenticated session. Full browser features,
no iframe workarounds needed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

feat: add back/forward nav, window.open bridge, live URL bar to confi…

…g panel

Missing browser features in the in-app OpenClaw configurator:
- Back / Forward buttons with enable/disable state tracking
- window.open() and target=_blank links now open in the system browser
  instead of silently failing
- URL bar updates as the SPA navigates (polled at 800ms + popstate)
- Navigation commands sent via postMessage into the iframe (cross-origin safe)
- button:disabled opacity so nav buttons visually dim when unavailable

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix: auto-install Node.js 22 via nvm when openclaw setup requires it

openclaw onboard requires Node >=22.12 but the editor pins v20.18.2.
Before running openclaw onboard, check the active node version.
If <22 and nvm is present, run nvm install 22 + nvm use 22 silently
in the setup log, then rebuild env.PATH with the new v22 bin.
If nvm is not present, show a clear error with instructions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix(macos): Xcode CLI screen, binary path storage, chown group error

- Xcode not installed: show dedicated panel-xcode-required with
  step-by-step instructions and a Retry button instead of failing
  silently into the log
- Post-install PATH issue: capture the binary's absolute path
  immediately after npm install succeeds (via npm config get prefix
  + known candidate paths); verifyCliBeforeSetup uses this stored
  path directly, skipping PATH lookup entirely
- chown group error: was using chown -R user:user which fails when
  the macOS username isn't registered as a group; changed to
  chown -R user (no group suffix)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>