- add Token Plan subscription and login entry to CLI, README, INSTALL, and skill
- document built-in Base URL and automatic key validation
- remove the completed Token Plan integration design document
- add openapi auth requirement with command-scoped access key flags and paired credential resolution
- persist OpenAPI credentials through auth login/status/logout using access_key_* config fields
- route token-plan commands through the centralized ACS signing client
- keep legacy openapi_access_key_* config readable while rejecting it as a new config set key
- refresh docs, generated references, telemetry authMethod, and e2e coverage
AK/SK signing was used only by `knowledge retrieve`'s deprecated fallback,
which the api-key auth gate now makes unreachable. Drop it; the command is
pure api-key.
- knowledge/retrieve: remove the AK/SK path + --access-key-id/secret/workspace-id
flags; api-key only
- delete client/ak-sign.ts and its signRequest/AkSignConfig exports
- drop access_key_id/access_key_secret from config schema, loader, and
`config show` / `config set`
- remove the now-unused PascalCase KnowledgeRetrieve request/response types
* fix: update API Key links to direct key management page
Replace /cli?source_channel=key_github& with /cn-beijing/?source_channel=key_github&tab=app#/api-key
so users land directly on the API Key management page.
* fix: update API Key links in Chinese README
Same change as English README - direct to API Key management page.
clh02467605