docs: sync with goclaw d85bf171..fabe86b3 (151 commits) — EN+VI+ZH

[thieung]

Sync docs with goclaw d85bf171..fabe86b3 (151 commits). Trilingual (EN + VI + ZH). Audited via goclaw-docs-audit + goclaw-api-audit across 8 parallel domains.

New pages

• providers/kimi.md — Kimi Coding (Moonshot) provider (kimi_coding): fixed User-Agent, temperature lock, required reasoning_content on tool-calls
• advanced/permission-matrix.md — Agent Permission Matrix (from new source doc 23)

Both wired into README + js/docs-app.js DOC_MAP + index.html sidebar (triple-sync), all 3 locales.

Highlights by area

• API: +56 REST endpoints (skills lifecycle/evolution, channel passive-memory, MCP/CLI context grants, agent-credentials, usage events, run timeline) + 2 changed; WS run.timeline.get. Catalog regenerated from HEAD → 362 endpoints.
• Security: fixed git PAT header (Bearer → Basic base64("x-access-token:<token>")); agent-scoped git credentials; git fails closed; credential_source audit field; venv .goclaw/ exec exemption.
• Channels: human-like delivery (gateway.chat_behavior), Telegram reasoning_delivery, multi-attachment batching, Discord thread backfill, Bitrix24 self-hosted, passive channel memory extraction.
• Skills: Skill Self-Evolution subsystem, 7 bundled skills (added goclaw), skill_manage files/visibility, selective export.
• Tools: corrected parallel-tool scheduling (read-only only); read_image/read_video url param; read_document local-first extraction.
• Providers: new Kimi page; Bailian qwen3.7-plus; Claude 4.6+ temperature omission; fixed Codex mislabel in extended-thinking.
• Observability: trace status enum fix (success → completed); new trace endpoints + ~13 filters; goclaw traces CLI; GOCLAW_SERVER.
• DB: 11 new tables (migrations 074–080); schema version 73 → 80.

Regenerated

• reference/api-endpoints-catalog.md (×3) — 362 endpoints
• llms.txt / llms-full.txt (×3)

Held / follow-up

• chat_behavior.preview WS method not published (not yet in goclaw source docs)
• "Channel context capability admin surface" omitted — unverifiable in internal/channels; needs a ui/web/gateway sweep