chore: sync upstream v2026.5.3

[github-actions]

Status: merge conflicts — manual resolution required

Automated sync from upstream stable release v2026.5.3 hit merge conflicts.

Upstream release	https://github.com/openclaw/openclaw/releases/tag/v2026.5.3
Sync branch	sync/upstream-release-v2026.5.3
Workflow run	https://github.com/daydreamsai/dreaming-claw/actions/runs/25362868406

Conflicted files

• docs/cli/index.md
• docs/concepts/model-providers.md
• docs/help/testing.md
• docs/providers/index.md
• docs/providers/models.md
• package.json
• pnpm-lock.yaml
• src/agents/pi-embedded-runner/run.ts
• src/cli/update-cli.test.ts
• src/cli/update-cli/update-command.ts
• src/commands/auth-choice-options.ts
• src/commands/onboard-types.ts
• src/plugins/bundled-plugin-metadata.generated.ts

Upstream changes (18711 commits)

06d46f7cf6 chore(release): refresh base config schema
9c373aed44 fix(web-fetch): add runtime context helper
0a59af2822 fix(auth): quiet codex oauth manual fallback
fc238e7a72 fix(plugins): warn on source-only installed packages instead of blocking config
6c678c2ffe fix(web-fetch): late-bind runtime config
8e9f8e720d chore(release): prepare 2026.5.3
dff35a8acb ci(release): parallelize ClawHub plugin publish
504b294cdc ci(release): pin trusted ClawHub publish limits
d9abbb36d5 ci(release): resolve plugin ClawHub refs explicitly
f1ab733cce ci(release): pin clawhub publisher runtime fix
eb8ba1d000 ci(release): preserve legacy clawhub package owner
8243a8eb78 ci(release): retry clawhub publish rate limits
0077e9cdab ci(release): throttle registry publish and verification
c6c64e2acf fix(release): type tarball exclusion guard
89c8948e23 fix(release): prepare beta 4
aab2a64781 test(release): expose beta tag in plugin fixture registry
7bc9bdad7b fix(plugins): clean pinned externalized load paths
363b7fb260 fix(plugins): trust official externalized npm installs
6878c22de9 fix(plugins): update trusted prerelease installs
bd28223914 fix(plugins): filter unavailable optional tools
788c896715 test: harden Codex binding provider normalization
39c11560ee fix: resolve Codex native auth by profile provider
e922bed9ce docs(changelog): note Codex binding auth fix
e5f4cb3644 fix: select Codex OAuth profile for bound app-server turns
b190fae70c fix: preserve Codex binding OAuth transport
df43768465 fix(openai): flatten realtime transcription session update
eadc3ee699 fix(realtime): label pre-ready transcription closes
d35303582a fix(openai): fail realtime voice pre-ready closes
6a1bcb1566 fix(openai): omit realtime transcription session type
9f0a114dab fix: use prerelease tags for official plugin repair

Resolution

git fetch origin sync/upstream-release-v2026.5.3 && git fetch upstream --tags
git checkout -B sync/upstream-release-v2026.5.3 origin/sync/upstream-release-v2026.5.3
git merge --no-ff --no-edit refs/tags/v2026.5.3
# resolve conflicts, then:
git rm .upstream-sync-pending || true
git commit
git push origin sync/upstream-release-v2026.5.3

Mark this PR as Ready for review once conflicts are resolved.

---

This PR was created by .github/workflows/upstream-release-sync.yml.