[pmwoz]

Stacked on #72, which pins the T3 contract that adds url to request_secret and executedModel to task results. Merge #72 first.

skills/poteto-mode/references/t3-adapter.md changes in two places:

• Model per role, step 2. The provider can run another model than the target, such as when the user's organization disallows it. A finished task reports it in executedModel, and T3 starts the task's summary with a note naming both models. The reply names the model that ran.
• Secrets. The root puts the link to the page where the user gets the value in request_secret's url, not in reason. The card shows it as a button. The Automations item gets webhook signing secrets through this item, so it needs no change.

This follows T3 at c6ca605. executedModel comes from the provider turn's reported model, normalized to the catalog id, so dated ids such as claude-opus-4-5-20251101 compare equal (ClaudeModelCatalog.ts, resolveClaudeReportedModelSlug). Only the Claude adapter reports it today, so Codex tasks return null. withExecutedModelNote in subagentProjection.ts adds the summary note.

#72 also listed sudo through request_secret for make-bot-ui. It is not adopted, because the adapter already marks make-bot-ui as having no counterpart under T3, and no other skill runs sudo.

Bumps the version to 0.13.9.

Checks

bun run check, bun test tools (39 pass), and bun run typecheck pass.