feat(account): add managed credits and cloud gateway

Introduce optional Apple account-backed credits with scoped gateway access while preserving local and BYOK paths. Refresh assistant behavior, tests, privacy disclosures, docs, and the website for the 2.0 experience.

Tests/suite-manifest.json

@@ -20,6 +20,26 @@
         "OSGKeyboardTests/ProviderToolRequestCoordinatorTests"
       ]
     },
+    "account": {
+      "description": "Host-private session, Apple integrity protocol, account center, and referral links",
+      "platform": "ios",
+      "tests": [
+        "OSGKeyboardTests/AccountAPIClientTests",
+        "OSGKeyboardTests/AccountCenterViewModelTests",
+        "OSGKeyboardTests/AccountCreditPurchaseManagerTests",
+        "OSGKeyboardTests/AccountSecurityPrimitiveTests",
+        "OSGKeyboardTests/AccountSignInCoordinatorTests",
+        "OSGKeyboardTests/AccountSnapshotLoaderTests",
+        "OSGKeyboardTests/DeviceIntegrityTests"
+      ]
+    },
+    "managed_gateway": {
+      "description": "Scope-limited grants and managed LLM transport",
+      "platform": "ios",
+      "tests": [
+        "OSGKeyboardExtTests/ManagedGatewayTests"
+      ]
+    },
     "sync": {
       "description": "iCloud KVS merge/sync for settings, local-only clipboard consent, dictionary, speech history, usage stats",
       "platform": "ios",
@@ -185,6 +205,8 @@
       "description": "Full iOS + Ext hermetic suite (includes host_misc + pipeline_perf; excludes mac and live_api)",
       "groups": [
         "config",
+        "account",
+        "managed_gateway",
         "sync",
         "polish",
         "edit_last_input",
@@ -201,6 +223,8 @@
       "description": "Default CI / PR gate: critical path without host_misc, pipeline_perf, or mac",
       "groups": [
         "config",
+        "account",
+        "managed_gateway",
         "sync",
         "polish",
         "edit_last_input",
@@ -213,7 +237,15 @@
     },
     "api": {
       "description": "Online API contracts + polish/LLM stubs",
-      "groups": ["cloud_asr", "polish"]
+      "groups": ["cloud_asr", "polish", "managed_gateway"]
+    },
+    "account": {
+      "description": "Account, Apple integrity, and referral-link contracts",
+      "groups": ["account"]
+    },
+    "managed": {
+      "description": "Managed gateway grant and provider transports",
+      "groups": ["managed_gateway", "cloud_asr"]
     },
     "asr": {
       "description": "Cloud + local ASR + utterance stitching",