feat: v0.7.9 — pais support-bundle one-shot artifact zip

[dshahnaz]

Summary

Replaces the manual "run doctor, run chat, zip logs" recipe with a single non-interactive command:

```bash
pais support-bundle # package whatever's already on disk
pais support-bundle --chat <agent_id> --file prompt.md # reproduce a failing turn first, then bundle
pais support-bundle -o /tmp/bug.zip # custom output path
```

What it does:

1. Runs `pais doctor` (fresh deployment snapshot: KB/index/agent inventory + allowlisted non-secret settings).
2. Optional `--chat --file`: sends the prompt once; any exception is routed through the v0.7.8 auto-dump so a fresh `chat-errors/-.json` lands on disk.
3. Zips: latest `doctor-.md`, every `chat-errors/.json`, and the rolling `pais.log`.
4. Emits a JSON manifest on stdout with `bundle` path, `included` list, `chat_errors` count, and `settings_snapshot` — scripts can parse it.

Default output is `/tmp/pais-bundle-.zip`. Secrets never enter the bundle (allowlisted settings only; no Authorization headers; prompt excerpts already capped at 2 KB by the v0.7.8 dump).

Test plan

• `uv run pytest -q` — 407 passed (+3 new)
• `uv run ruff check && uv run ruff format --check && uv run mypy src` — clean
• New tests: existing artifacts bundled, pre-existing chat-errors picked up, `--chat` without `--file` errors cleanly
• CI green on 3.10 / 3.11 / 3.12

🤖 Generated with Claude Code