docs: sync PRs #926-#947 to aeon docs

[aaronjmars]

Syncs merged aeonfun/aeon PRs #926-#947 into the in-repo docs, and promotes the harness headline from six to seven now that fx (#941) is a real run-harness. The website changelog was already independently ahead (covered #926-#942), so this backfills the aeon-repo side for that window and adds the new #943-#947.

Source PRs synced

• Signal: docs(readme): note the operator console installs as a Codex plugin too #927 (README Codex-plugin note), fix: Windows Connect OAuth, setup-token timeout, config line-folding, Foundry install, mainnet flag masking #930 (Windows Connect/OAuth fix batch), feat(dashboard): auto-allowlist MCP secret names into the run workflows #931 (dashboard auto-allowlists MCP secret names), fix(harness): stop truncating diagnostic output on every failed dispatch #932 (untruncated failed-dispatch diagnostics), fix(skill-mode): grant Bash(cd:*) — silently denying entire compound commands #933 (Bash(cd:*) grant), fix(aeon): scope the skill-runner concurrency group by target too #934 (skill-runner concurrency scoped by target), fix(secretcurl): keep substituted secrets out of curl's own argv #935 (secretcurl argv leak), fix(state_store,health_issue): converge racing issue-store ensures #936 (racing issue-store ensures), fix(webhook): dedupe Telegram updates by update_id before dispatch #937 (Telegram update_id dedupe), improve(memory-flush): deterministic prep + structured watermark #938 (memory-flush deterministic prep), feat(harness): add fx (vercel) as a 7th harness #941 (fx = 7th run-harness), fix(dashboard): fx never showed up in the harness picker #943 (fx in harness picker), fix(dashboard): lock aeon.yml read-modify-write to stop config races #944 (dashboard aeon.yml race lock), feat(skills): add skill-article — launch article for any skill, receipts-first #945 (new skill-article skill, catalog 75 to 76), docs(ecosystem): add AgentOS #946 (ecosystem +AgentOS), Egress audit hardening (iron-proxy) - opt-in #947 (egress-audit iron-proxy, opt-in)
• Noise (one Maintenance line): docs: sync PRs #890-#925 to aeon docs #926, ci: scan the operator-console plugin with the HOL AI Plugin Scanner #928, chore: drop the HOL plugin-scanner workflow + config #929, Remove unused docs/assets images #939, Refresh providers + free-aeon docs images #940, test(state-store,health-issue): skip before-side unless base ref is truly pre-fix #942

Surfaces changed

• CHANGELOG.md [Unreleased] - Added / Changed / Fixed / Maintenance for docs: sync PRs #890-#925 to aeon docs #926-Egress audit hardening (iron-proxy) - opt-in #947
• Catalog 75 -> 76 (Basics 17 -> 18, skill-article feat(skills): add skill-article — launch article for any skill, receipts-first #945): .claude/skills/aeon/** + byte-identical plugin/skills/aeon/** (footer, all-N, run-log 62 -> 63; Steps 43 stays - skill-article has no ## Steps)
• docs/skill-packs.md summary table - fixed pre-existing drift (Basics 17->18, Crypto 14->15, Productivity 10->11; now sums 76, matching the full-catalog table)
• Harness headline six -> seven (fx): README (## Support seven harnesses, hero alt-text, "Seven engines" banner alt, the inline "any of seven agent CLIs" line, the doc-nav harness pill), docs/assets/hero-animated.svg ("7 harnesses"), docs/CAPABILITIES.md ("all seven harnesses" - fx is read_only: sandbox, so the sandbox claim holds)

Notes

• docs/harnesses.md + harness-adapter/harnesses.json already document fx (from feat(harness): add fx (vercel) as a 7th harness #941). Left as-is: line 85 ("verified 2026-07-22") is historical - fx was added later and verified locally; the internal "all six" at lines 295/298/326 live in feat(harness): add fx (vercel) as a 7th harness #941's own file. If fx is now staged by the hosted workflows, 298/326 are worth a follow-up in that file.
• The banner image docs/assets/harnesses-aeon.jpg still visually shows six engines - @aaronjmars is re-rendering it.
• Marketing/prose total skill counts stay on the 60+ floor (docs: express headline skill count as a stable 60+ floor #859 convention).

Watermark advances 925 -> 947.