#225 models: show granted gated cloud models in the account list

Summary

• wally models list --cloud now includes chat models that GET /v1/models omits when GET /v1/models/catalog still names them for this account. That catalog is grant-aware, so deepseek-v4.1-flash-1017-uncensored shows up only for an account that holds it.
• The on-disk model cache used by -m gets the same ids. An account without the grant never receives the id, and a launch keeps the existing unknown model '<id>' error.
• Harness pickers already merged these catalog rows in 0.8.15. This covers the models list and the cache those launches check.

Test plan

• cargo test --lib gated_chat_ids
• Signed in with the grant: wally models list --cloud includes deepseek-v4.1-flash-1017-uncensored
• Signed in without the grant: that id is absent, and wally <harness> -m deepseek-v4.1-flash-1017-uncensored reports unknown model

Made with Cursor

---

Summary by cubic

Shows gated cloud chat models in wally models list --cloud and in the on-disk model cache, so accounts that hold a grant can see and launch models that GET /v1/models omits. Also moves the shannon harness command under "Security tools" in help output and bumps the release to 0.8.16.

• The price catalog is per-account and grant-aware; a model id appears only for accounts entitled to it.
• Accounts without the grant keep the existing unknown model '<id>' error when launching with -m.
• A failed catalog read keeps the granted ids from the last good cache read; decision-only rows are still excluded.
• Updates the model cache used by -m in addition to the list command, with tests now expecting the catalog read during refresh.
• Regenerates golden help snapshots for the shannon relocation.

Summary by CodeRabbit

• New Features
  • Eligible chat models not returned by the standard model listing can now appear in cloud and cached model listings when catalog pricing is available.
  • If catalog pricing is unavailable, cloud listings continue to show models returned by the live service. Cached listings also retain previously cached models missing from refreshed public results.
• Updates
  • Shannon now appears under Security tools in command help instead of Coding tools. Its name and description are unchanged.
  • Updated the release version to 0.8.16.