Security, scheduled messages, Code PR polish, and site cleanup.

Added a Secrets/PII logging removal library task and broadened harness auth-gate coverage for selectable agents and runtime configuration.

Detected and used repository default branches such as `main`, reduced unnecessary profile sync updates, and fixed Playwright support in the runtime container.

Corrected PR screenshot handoff behavior so screenshots are only attached when requested and are available for harness PR comments.

Added connected-tool and adapter approval surfaces for MiniBrain seats, with API hooks for adapter manifests, approvals, retirement, and runtime state.

Kept builder sessions seat-scoped across restores, streams, cache keys, dry runs, and activation so stale sessions do not leak between seats.

Published the April 28 release rollup and tightened release tests while keeping release cards and detail pages aligned.

Refined the Code page copy, calls to action, and regression coverage around Molten Code setup and launch language.