chore: pi family 0.85.1 -> 0.87.1 (finishTurn, transcript contexts, typebox 1.3.27)

Mechanical fallout only; semantic deltas flagged in the wave report:
- shouldStopAfterTurn -> finishTurn ({action:'end'} wrap; loop order verified
  equivalent for Wave C stranding)
- transcript rework: seeded leading SystemMessage filtered at both
  state.messages read seams (ui-stream settleWith, pi-run slice); prompt
  and tool declarations now ride the transcript
- streamOnce sites normalizeContext() (Context -> TranscriptContext)
- AgentToolResult details / ToolCall.arguments JsonValue narrowing (casts)
- AUTH_PROVIDER_KEYS regenerated (meta added); glm-5.3-flash price pin
  follows the 0.87.1 catalog (0.15/0.5/0.05)
- vanish probe: 0/12 vs 2/6 baseline; live smoke green on PORT=3004

package.json

@@ -17,9 +17,8 @@
 		"desktop:dist": "next build && node scripts/build-server.mjs && electron-builder --mac --arm64"
 	},
 	"dependencies": {
-		"@earendil-works/pi-agent-core": "^0.85.1",
-		"@earendil-works/pi-ai": "^0.85.1",
-		"typebox": "1.3.7",
+		"@earendil-works/pi-agent-core": "^0.87.1",
+		"@earendil-works/pi-ai": "^0.87.1",
 		"@mozilla/readability": "^0.6.0",
 		"@radix-ui/react-use-controllable-state": "^1.2.6",
 		"@rive-app/react-webgl2": "^4.32.1",
@@ -58,6 +57,7 @@
 		"tailwind-merge": "^3.6.0",
 		"tokenlens": "^1.3.1",
 		"turndown": "^7.2.4",
+		"typebox": "^1.3.27",
 		"use-stick-to-bottom": "^1.1.6",
 		"zod": "^4.4.3"
 	},