* chore(deps): remove unused dependencies and harden CI supply chain
Dependency cleanup:
- Remove unused deps: papaparse, unified, and 6 unused Radix primitives
(alert-dialog, radio-group, scroll-area, separator, toggle, visually-hidden)
plus @tanstack/react-query-devtools (all verified zero imports repo-wide)
- Consolidate jwt-decode into the existing jose dependency (decodeJwt)
- Migrate react-window to @tanstack/react-virtual to drop a redundant
virtualization library (terminal, structured-output, code viewer)
- Remove the better-auth-harmony plugin and its gating env flag
Supply-chain hardening:
- SHA-pin every GitHub Action to a full commit SHA with a version comment
- Pin CI bun-version to 1.3.13 (was "latest" in the release job)
- Raise bun minimumReleaseAge cooldown from 3 to 7 days
- Add a non-blocking `bun audit` step in CI
- Add a CODEOWNERS gate routing dependency-manifest changes to @simstudioai/deps
* chore(deps): remove unused apps/docs dependencies (@tabler/icons-react, dotenv-cli)
* style(search-modal): use Send icon for Invite teammates action
* feat(search-modal): surface New chat as the top action above Create workflow
* feat(search-modal): add Secrets to the pages list