Fix Kimi subscription quota rows

[steipete]

Summary

• Switch Kimi membership enrichment to the current GetSubscriptionStats endpoint.
• Surface the subscription Code 7-day quota in menus and large widgets while preserving the established three-row fit in compact widgets.
• Reject disabled or non-finite subscription ratios and persist only the two intentional Kimi subscription lanes in stable order.

This carries and improves @skyzer's contribution from #1939 because the original fork branch does not allow maintainer edits.

Validation

• swift test --filter Kimi — 68 tests passed.
• swift test --filter CodexBarWidgetProviderTests — 43 tests passed.
• make check — clean.
• make test — all 48 shards passed on the exact head.
• Whole-branch autoreview — clean after fixing the compact-widget overflow finding.
• Fresh signed package launched and stayed running; bundled helper reports CodexBar 0.40.1.
• Direct endpoint probe: the obsolete singular route returns 404; the plural route is live and auth-gated (401 without credentials).

Authenticated Kimi values could not be re-fetched on the maintainer host because Kimi is disabled there and the saved login is passkey-only. The endpoint/parser/projection/widget paths are covered by focused transport fixtures and exact-head tests.

Risk

Low and provider-scoped. Membership enrichment remains optional, so failure or timeout does not suppress the required Kimi usage result. No dependencies changed.

Supersedes #1939.

[steipete]

Maintainer proof for exact head 78c2719c8d8a0662e25c8fd54e035fe24e20b24f:

• Public Model Identifier Gate: PASS; the diff contains no model-bearing public mutation.
• Focused Kimi/provider/widget validation: 68 tests passed.
• Compact/large widget contract: 43 tests passed; small and medium retain three rows, large exposes all four persisted rows.
• make check: clean.
• Full local suite: all 48 shards passed on the exact head.
• Whole-branch autoreview: clean after resolving the compact-widget overflow finding.
• Packaged proof: freshly signed app launched and remained running; bundled helper reports CodexBar 0.40.1.
• Endpoint proof: obsolete singular membership route returns 404; replacement plural route is live and auth-gated (401 without credentials).
• Hosted CI: changes, lint, security, Linux arm64 (6m04s), and Linux x64 (7m41s) green. Four hosted macOS shards remain capacity-queued; landing under the documented capacity-only policy with equivalent exact-head local coverage.
• Dependency freshness: no dependency files changed.

Authenticated quota values were not available on this host; Kimi is disabled and the saved login is passkey-only. Optional-enrichment failure containment plus endpoint, parser, projection, and widget fixtures provide the remaining behavior coverage.

[skyzer]

Thanks for merging, next time i'll make sure my clanker will allow maintainers to do changes in PR as well!
Also a proof (i've just built from main branch)