Implements the "CoC Shell Redesign" top navigation as an opt-in,
remote-first shell. Default off; toggled via repo Settings -> Remote Shell
(localStorage `coc-remote-shell-enabled`). Desktop only; classic nav is
unchanged when the flag is off.

- RemoteTopBar (row 1): one tab per git remote via groupReposByRemote, with
  a clone-count chip, aggregate running pulse, and summed unseen badge.
- RemoteSubBar (row 2): remote-scope (Work Items, Pull Requests) | clone
  switcher popover | clone-scope tabs (Activity/Chats, CLI Sessions, Git,
  Terminal) | ... overflow (Explorer, Schedules, ...) | compact Ask/Queue.
- Reuses existing AppContext/Queue/Repos selection and Router hash routing;
  renders above a chromeless RepoDetail body.
- Extracts RepoDetail's sub-tab visibility logic into repoSubTabs.ts
  (computeVisibleSubTabs) shared by both surfaces; moves SHOW_WIKI_TAB /
  SHOW_MEMORY_TAB into featureFlags.ts (re-exported from TopBar).

Tests: 33 new unit/component tests (shell model, tab partition, flag hook,
RemoteTopBar, RemoteSubBar); updated 3 source-scraping tests for the relocated
tab logic. tsc, eslint, and client build all clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

…ranch switching

Removed outdated quick-start pointers from the AGENTS.md file and added a new hard invariant stating that AI must never switch branches during operation. This enhances clarity and ensures adherence to best practices in the development process.

Promotes the remote-first shell from a per-repo / localStorage client flag
to a global `features.remoteShell` admin setting, toggled in
Admin -> Configure -> Features (Remote-first shell). Applies to the whole
deployment and takes effect on reload (no restart).

- Registry: adds features.remoteShell to ADMIN_SETTING_DEFINITIONS (auto-
  renders on the Features card), config.ts defaults, and the
  RuntimeDashboardConfig.features contract (remoteShellEnabled).
- Client: new useRemoteShellEnabled() reads the live flag via
  isRemoteShellEnabled() (utils/config), replacing the localStorage
  useRemoteShell hook; TopBar and ReposView consume it.
- Removes the per-repo Remote Shell select from RepoPreferencesSection.

Tests: replaces the localStorage hook test with useRemoteShellEnabled
coverage; the generic admin-setting contract suite auto-covers the new
definition. tsc (coc + coc-client), eslint, and client build are clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Show every clone-scoped sub-tab inline and collapse only the tabs that do
not fit into the ... overflow, instead of always hiding all but a fixed
primary set. Mirrors the repo tab strip's width-measurement approach.

- shellModel: partitionShellTabs now returns all non-remote tabs as the
  clone scope (no fixed overflow); adds computeVisibleTabKeys (pure,
  tested) to pick the tabs that fit and always keep the active one visible.
- RemoteSubBar: measures clone tabs against the available width via a
  hidden mirror + ResizeObserver and renders the overflow tail under ...

Tests: rewrites the partition test, adds computeVisibleTabKeys coverage,
updates the RemoteSubBar component test for the all-visible path.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

The clone-switcher popover is per-origin, so the "Clone again / add
worktree" action living inside it was confusingly scoped. Move it to a
single top-level "+" button at the end of RemoteTopBar (row 1) that opens
CloneRepoDialog; the popover now just lists the remote's clones.

- RemoteTopBar: trailing "+" (remote-add-clone) opens CloneRepoDialog and
  refreshes repos on success.
- RemoteSubBar: drop the popover footer, the dialog, and the now-unused
  onRefresh prop (ReposView no longer passes it).

Tests: add the top-level add-clone test; drop the removed footer wiring.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

The top-level "+" only offered Clone, which dropped the "Add workspace
folder" (register an existing local folder) and "Add specific repository"
actions the classic repo strip had. Make the "+" an add menu with all
three: Add workspace folder (AddFolderDialog), Add specific repository
(AddRepoDialog), Clone repository (CloneRepoDialog) — placed outside the
scroll container so the dropdown isn't clipped.

Tests: cover the add menu and the folder / clone dialog paths.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

PR #331 CI: 10 test files partially-mock featureFlags. Moving SHOW_WIKI_TAB
into it (so repoSubTabs could read it) made those mocks throw on the missing
export wherever repoSubTabs is transitively imported (e.g. AdminPanel,
ReposGrid). Move SHOW_WIKI_TAB / SHOW_MEMORY_TAB to a dedicated lightweight
navFlags.ts (re-exported from TopBar for BottomNav/Router); featureFlags.ts's
public surface is restored so the existing partial mocks keep working.

Also update executors-prompt-builder.test.ts for the search_conversations
suffix removed in aa695ef (the tools stay wired and asserted).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>