#14 Request llm-provider read access with the vault enrollment

Adopts common-auth 0.44.0 and claustrum-client 0.18.0. Setup's enrollment requests read access to the llm-provider category, so approval grants it in one step on vaults that support it; common-auth confirms access with one listScoped after approval and prints the grant command only when access is missing. The plugin's own grant hint now prints only on dry runs, which skip enrollment.

---

Summary by cubic

Requests llm-provider read access during vault enrollment, so approving enrollment grants it in one step on vaults that support requested grants. Upgrades @cortexkit/common-auth to 0.44.0 and @cortexkit/claustrum-client to 0.18.0.

• After approval, setup confirms access with a listScoped call and prints the grant command only when access is missing.
• The plugin's own grant hint now prints only on dry runs, which skip enrollment.
• Older vaults that reject requested grants fall back to the manual grant command.