Merge upstream/main into feat/dws-devapp
Sync with DingTalk-Real-AI/main (1.0.35–1.0.40):
- 1.0.35–1.0.39: chat @-mentions, sheet export, doc strip unsafe chars,
PAT batch grants, devdoc RAG, agent_code detection, AI-tag opt-in
- 1.0.40 (#486): China mirror via Gitee + npmmirror
- (#488) embed skills/ into binary
- (#464) strip duplicate H1 on JSONML doc-create
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG.md
# README.md
# README_zh.md
# docs/command-index.md
# internal/app/runner.go
# internal/app/runner_test.go
# internal/auth/channel.go
# internal/helpers/devdoc.go
# internal/helpers/devdoc_test.go
# internal/pat/chmod.go
# internal/pat/chmod_test.go
# internal/pat/pat.go
# internal/transport/client.go
# scripts/install-skills.sh
# scripts/install.ps1
# scripts/install.sh
# skills/mono/references/products/devdoc.md
# skills/mono/references/products/simple.md
# skills/multi/dingtalk-devdoc/references/devdoc.md
# skills/multi/dingtalk-skill/references/skill.md
# test/cli_compat/devdoc_test.go
# test/cli_compat/helpers_test.go
# test/skill_tests.md
# test/skill_tests_results.md
# test/unit/pat_host_owned_signal_test.go