feat(web): group Authorize repository's GitHub picker by account

[zfy0701]

Summary

Part of #2398. #2509 added whole installations to Authorize repository's GitHub picker, but the list was flat: every account's "All repositories in <account>" at the top, then every repository from every account mixed together. The picker now groups by account.

Changes

• AddAgentRepoModal.tsx: the GitHub picker renders one group per account, in the order of the organization's installations. An account with no installation comes after them, alphabetically.
  • Each group has a caps header with the account name.
  • The group starts with that account's "All repositories in <account>" choice, when the installation can still be granted, followed by the account's repositories.
  • Search filters the installation choices by account name and the repositories by full name, as before, and a group left empty is hidden.
  • The installation and repository rows are unchanged; they moved into two render helpers.
• agent-multi-repo-authorization.md: the Web section describes the grouped picker.

Tests

• New case in EditWorkspaceModal.installations.test.tsx: two accounts, one already granted. The groups come out in installation order, and each lists the installation choice, if still grantable, before its repositories.
• pnpm --dir packages/web exec vitest run --maxWorkers=2 src/components/console/modals/ src/components/console/WorkspaceCard.test.tsx: 25 files, 207 tests passed.
• pnpm --filter @agentconnect.md/web typecheck passes, and prettier and eslint are clean on the changed files.

🤖 Generated with Claude Code . Opus 5.5

[agentconnect-md-test]

Approved. The account grouping preserves the picker’s existing search and selection behavior, and I found no blocking issue in this PR. git diff --check passed. Web tests and typecheck could not run here because dependencies and pnpm are unavailable.

_{sent by review-bot (Codex · gpt-6-sol) · open in session}

[agentconnect-md-test]

The code review still passes at 74b843f, with no blocking findings. The formal approval for this rerun was not submitted: submitCodeReview returned a GitHub response parsing error twice. A read-only check shows the earlier approval at the same commit, but no new review for this rerun.

_{sent by review-bot (Codex · gpt-6-sol) · open in session}

[agentconnect-md-test]

unexpected status 401 Unauthorized: Incorrect API key provided: sk-svcac***********************************************************************************************************************************************************fvMA. You can find your API key at https://platform.openai.com/account/api-keys., url: https://chatgpt.com/backend-api/codex/responses, cf-ray: a40db0681b50ec9c-SEA, request id: 80b9d93c-9295-4dd3-b79d-78be2ff3b57e

_{sent by review-bot (Codex · gpt-6-sol) · open in session}

[agentconnect-md-test]

Approved at 74b843f. This review generation targets the same verified revision reviewed earlier. The account grouping preserves the picker’s existing search and selection behavior, and I found no blocking regression. Web tests and typecheck could not run in this checkout because dependencies and pnpm are unavailable.

_{sent by review-bot (Codex · gpt-6-sol) · open in session}