fix(release): reconcile v3.8.29 cycle gate/test drift surfaced at release

Full quality gate (test:unit + test:vitest + check:docs-all) caught drift from
cycle PRs that the PR→release fast-gates do not run. Each fix aligns to the
already-merged code (no behavior change):

- test(cloud-agent): expect 4 registered agents incl. cursor-cloud (#4250)
- test(db-rules): add accessTokens to INTENTIONALLY_INTERNAL audited set (#4256)
- test(glm): GLM/GLM-CN coding timeout 900000 -> 3000000 (50min) (#4255)
- fix(i18n): add connect/tokens/configure CLI locale sections to pt-BR.json (#4256)
- docs(env): document OMNIROUTE_CONTEXT in .env.example + ENVIRONMENT.md (#4256)
- fix(ci): fabricated-docs checker now indexes arg-bearing .command("x <a>")
  forms (false-negative flagged a real `omniroute connect`); +2 regression tests

scripts/check/check-fabricated-docs.mjs

@@ -570,8 +570,10 @@ export function buildCodebaseIndex(root = ROOT) {
       else if (/\.(mjs|js|ts)$/.test(name)) {
         try {
           const content = fs.readFileSync(child, "utf8");
-          // Programmatic API: `command('foo', ...)`, `.command('bar')`
-          const m1 = content.matchAll(/\.command\(\s*['"`]([a-z][a-z0-9-]+)['"`]/g);
+          // Programmatic API: `command('foo', ...)`, `.command('bar')`, and
+          // arg-bearing forms `.command('connect <host>')` / `.command('chat [msg]')`
+          // — capture the leading subcommand token regardless of trailing args.
+          const m1 = content.matchAll(/\.command\(\s*['"`]([a-z][a-z0-9-]+)/g);
           for (const m of m1) cliCommands.add(m[1]);
           // Subcommand names: `${name}Cmd`, `name = "foo"`, etc.
           const m2 = content.matchAll(/name:\s*['"`]([a-z][a-z0-9-]+)['"`]/g);