Keep Cloud requests and Native links in their original scope
Cloud requests could follow a new team or replay an old account’s result. They now retain their original account, team and authority; scope changes retire old calls, servers and open tokens.
The parent owns the selected team’s Native link, with one scoped startup path for UI, CLI, MCP and scripts. Auth-session changes close admission and retire old resources before starting a replacement. Sign-out retains its original account and generation, then reconciles any newer session.
Builds on #22120. At c2f62a9c1c9f, 28 selected Mac test functions pass, along with all 137 server tests on both macOS and Linux. Live Cloud journeys and backend idle revocation remain follow-ups. See the contract.
Changelog
Fixed: Cloud requests, Native links and sign-out retain their original account and authority.