WIP: Remove global state from pi-ai OAuth/API key handling

- Remove setApiKey, resolveApiKey, and global apiKeys Map from stream.ts
- Rename getApiKey to getApiKeyFromEnv (only checks env vars)
- Remove OAuth storage layer (storage.ts deleted)
- OAuth login/refresh functions now return credentials instead of saving
- getOAuthApiKey/refreshOAuthToken now take credentials as params
- Add test/oauth.ts helper for ai package tests
- Simplify root npm run check (single biome + tsgo pass)
- Remove redundant check scripts from most packages
- Add web-ui and coding-agent examples to biome/tsgo includes

coding-agent still has compile errors - needs refactoring for new API

packages/coding-agent/examples/hooks/dirty-repo-guard.ts

@@ -10,11 +10,7 @@ import type { HookAPI } from "@mariozechner/pi-coding-agent/hooks";
 export default function (pi: HookAPI) {
 	pi.on("session", async (event, ctx) => {
 		// Only guard destructive actions
-		if (
-			event.reason !== "before_clear" &&
-			event.reason !== "before_switch" &&
-			event.reason !== "before_branch"
-		) {
+		if (event.reason !== "before_clear" && event.reason !== "before_switch" && event.reason !== "before_branch") {
 			return;
 		}
 
@@ -46,10 +42,10 @@ export default function (pi: HookAPI) {
 					? "switch session"
 					: "branch";
 
-		const choice = await ctx.ui.select(
-			`You have ${changedFiles} uncommitted file(s). ${action} anyway?`,
-			["Yes, proceed anyway", "No, let me commit first"],
-		);
+		const choice = await ctx.ui.select(`You have ${changedFiles} uncommitted file(s). ${action} anyway?`, [
+			"Yes, proceed anyway",
+			"No, let me commit first",
+		]);
 
 		if (choice !== "Yes, proceed anyway") {
 			ctx.ui.notify("Commit your changes first", "warning");