fix(deps): upgrade WorkOS packages and migrate SDK calls

[nicknisi]

Summary

• Upgrade the WorkOS Node SDK to 10.13.0, emulate to 0.13.1, migrations to 2.6.0, OpenAPI spec to 0.100.0, and skills to 0.7.3.
• Migrate API-key, organization-domain, and Admin Portal calls to the current SDK methods.
• Check command mocks against the installed SDK and preserve the existing Vault versions JSON shape.
• Add an asset test that reads the real bundled AuthKit application setup reference. It fails against skills 0.7.2 and passes against 0.7.3.

Scope

This PR contains dependency upgrades, required SDK migrations, and bundled-asset coverage only. Native installer URL configuration, stricter installation validation, prompt changes, and completion reporting are excluded for separate review.

Verification

Verified in a clean worktree without the uncommitted installer changes:

• bun install --frozen-lockfile passed.
• bun run test: 2,771 tests passed across 160 files. An initial run hit the existing 500ms subprocess-timeout test; the unchanged full-suite rerun passed.
• bun run typecheck, bun run lint, and bun run format:check passed.
• bun run build passed.
• Compiled workos internal verify-assets --json passed for embedded skills, native keyring binding, and Agent SDK checksum/execution.
• Verified the compiled binary reports bundled skills 0.7.3 and extracts workos-authkit-setup.md with Sign-out URI and Initiate login URI guidance.

Lockfile

Includes the existing bot normalization commit. Socket Firewall tarball URLs introduced by the local dependency update were normalized to match the repository convention; the incremental lockfile diff only changes skills to 0.7.3 and its integrity hash.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no outstanding correctness, security, or repository-rule issues identified.

Summary

This PR upgrades the WorkOS dependencies, migrates CLI commands to the current Node SDK interfaces, preserves the established Vault versions JSON contract, and adds coverage for the bundled AuthKit setup reference.

• Moves API-key operations to the SDK’s apiKeys resource.
• Updates organization-domain and Admin Portal calls to current method names.
• Filters newly exposed Vault version fields to preserve existing output.
• Upgrades bundled skills to 0.7.3 and verifies the new reference through the production asset path.

_{Reviews (2) · Last reviewed commit: "fix(deps): bundle WorkOS skills 0.7.3"}