fix(copilot): tenant-aware model availability (v0.0.95)

[FreddyJD]

Summary

• Discover Copilot models from authenticated GET {token.endpoints.api}/models, not the public models.dev catalog. Respect policy state, picker visibility, and supported chat endpoints without enabling any policies.
• Refresh availability with a one-minute main-process cache and renderer refresh on interval, focus, reconnect, visibility, and picker open. Invalidate account-bound caches and discard stale in-flight responses.
• Remove revoked models from pinned/recent sections without deleting saved preferences. Require an enabled model for desktop/remote sends and compaction instead of silently switching or using a hardcoded Copilot fallback.
• Preserve live model capabilities and route inference through the account's assigned API host.
• Bump the desktop version from 0.0.94 to 0.0.95 in package.json and package-lock.json, in the same commit.

Validation

• npm run format:check
• npm run build (includes main/preload/renderer typechecks)
• npm run i18n
• npm run smoke:shared (1,094 checks)
• npm run smoke:i18n (18 checks)
• npm run smoke:store (includes live refresh lifecycle and reconnect race regressions)
• npm run smoke:app (731 checks; inherited PORT/ROXY_PORT cleared for the port-isolation test)
• npm run smoke:diff (47 checks)
• npm run smoke:multirepo (42 checks)
• npm run smoke:live (29 checks)
• npm run smoke:cookies
• Real Chromium picker checks at desktop and mobile widths with a mocked bridge: live revocation, newly enabled models, empty availability, restored pins, unchanged saved selections, reopen refresh, and blocking sends/compaction for a revoked model.

Copilot API behavior was cross-checked against Microsoft's current Copilot extension source. No live tenant credentials or organization policies were accessed or changed. Availability remains subject to GitHub's policy propagation timing.