Merge remote-tracking branch 'origin/master' into claude/unified-environment-credentials-c8841a

# Conflicts:
#	apps/cli/README.i18n.yaml
#	apps/cli/README.md
#	apps/cli/README.zh.md
#	docs/user/guide/config.i18n.yaml
#	packages/client/ui-models/src/client/ModelsSection.module.css
#	packages/cordis/repository-plugin/README.i18n.yaml
#	packages/cordis/repository-plugin/README.md
#	packages/cordis/repository-plugin/README.zh.md
#	packages/credentials/README.i18n.yaml
#	packages/credentials/README.md
#	packages/credentials/README.zh.md
#	packages/llm/llm-deepseek/README.i18n.yaml
#	packages/llm/llm-deepseek/README.zh.md
#	packages/ui/app-boot/README.i18n.yaml
#	packages/ui/app-boot/README.md
#	packages/ui/app-boot/README.zh.md
#	packages/ui/app-boot/src/index.ts
#	packages/ui/app-boot/tests/config-reload.spec.ts
#	packages/ui/app-boot/tests/personal-config.spec.ts

packages/ui/app-boot/tests/app-boot.spec.ts

@@ -648,11 +648,10 @@ describe('boot', () => {
   })
 
   it('returns instead of asserting over a tree a surface disposed mid-startup', async () => {
-    // What a TUI `/exit` does (ui-tui's disposeRootAndExit): dispose the root
-    // fiber, which lands while boot() is still awaiting the Loader whenever the
-    // surface renders before the last entry settles. The Loader service goes
-    // with the tree, so reading it for the post-boot assertions would crash an
-    // app that exited exactly as the user asked.
+    // A surface can dispose the root fiber while boot() is still awaiting the
+    // Loader, before the last entry settles. The Loader service goes with the
+    // tree, so reading it for the post-boot assertions would crash an app that
+    // exited exactly as the user asked.
     const dir = tmp()
     writeFileSync(join(dir, 'exiting.mjs'), [
       'export const name = "exiting"',