Merge remote-tracking branch 'origin/main' into spence/nav

* origin/main:
  Remove build-dependencies section from Cargo.toml (#6946)
  add /rp-why skill blog post (#6997)
  fix: fix snake_case function names in code_execution instructions (#7035)
  Document max_turns settings for recipes and subagents (#7044)
  feat: update Groq declarative data with Preview Models (#7023)
  fix(codex): propagate extended PATH to codex subprocess (#6874)
  Switch tetrate tool filtering back to supports_computer_use (#7024)
  feat(ui): add inline rename for chat sessions in sidebar (#6995)
  fix: handle toolnames without underscores (#7015)
  feat(claude-code): use stream-json protocol for persistent sessions (#7029)
  test(providers): add model listing to live provider suite (#7038)
  Agent added too much (#7036)
  fix(deps): bump tree-sitter to 0.26 and set sqlx default-features=false to fix RUSTSEC advisories (#7031)
  feat: add image support and improve error resilience for Codex (#7033)
  fix(providers): Azure OpenAI model listing 404 during configure (#7034)
  fix(deps): bump bat to 0.26.1 to resolve RUSTSEC-2026-0008 (#7021)
  Don't swallow Tetrate errors  (#6998)
  docs: remove hardcoded_stuff links (#7016)

# Conflicts:
#	ui/desktop/src/components/GooseSidebar/AppSidebar.tsx

Author: zanesq

.github/workflows/cargo-audit.yml

@@ -26,6 +26,7 @@ jobs:
         # https://github.com/marketplace/actions/cargo-audit-your-rust-dependencies
       - uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24
         name: Audit Rust Dependencies
-        # with:
-          # Comma separated list of issues to ignore
-          # ignore: RUSTSEC-2020-0036
+        with:
+          # sqlx-mysql pulls in rsa, but goose only uses sqlite. cargo-audit
+          # can't distinguish used from unused deps (rustsec/rustsec#1119).
+          ignore: RUSTSEC-2023-0071