docs(user-docs): sync with dev since the 09-15 review + 0.9.5 What's New + DigitalOcean install guide

[trinity-ability]

Description

Brings docs/user-docs/ up to date with the 38 commits merged to dev since the last full user-docs review (#2803), and adds the user-facing What's New in v0.9.5 page.

Documented

• Workspace
  • The Work card's one-line "what the agent is doing" status, and the chat scrolls to the card when you send.
  • The theme switch, and sign-in that stays in sync across tabs.
  • A new Dictation section: the mic only shows when speech-to-text can work, and a failure names its cause.
  • Room turns can be stopped, and 1:1 attachments travel with an @mention.
• GitHub & skills
  • Git now asks a credential helper for the token, so it is out of remote URLs, .git/config and process listings. The agent can still read GITHUB_PAT, and the docs say so.
  • A token-cleanup section in the upgrade guide, linking the runbook.
  • The sync-health poll no longer takes the git index lock, and SYNC_HEALTH_POLL_INTERVAL_SECONDS is documented.
  • Comma-separated allowed-tools works.
• MCP & automation
  • Fan-out async_mode, and the batch deadline now limits only the wait, not the tasks.
  • Loop tools check agent-to-agent permission, and refused MCP calls are audited as refusals.
  • An unknown model value gets a 422.
  • Only people can switch on "wake on answer".
  • Post-run validation, which was undocumented until now.
  • Subscription usage above 100%, and the retry after a subscription switch keeps the rest of the timeout.
• Onboarding & deploy
  • New guides/deploying/digitalocean.md, converted from the docs site and checked against trinity-do-create.sh.
  • The Getting started checklist now lives in the Systems sidebar.
  • New Public URL labels.
  • The ops agent's /update now handles hosted installs.
• Release page: whats-new/v0.9.5.md, linked from both indexes. Its "Full technical record" link points to docs/releases/0.9.5.md, which arrives with the release-prep PR.

No managed hosting. Ability.ai does not currently offer managed Trinity hosting. The "Cloud Hosted (ability.ai)" comparison and walkthrough are removed from guides/deploying-trinity.md, and the self-hosted options are re-lettered A–D. The FAQ answer that pointed users at a hosted sign-up is rewritten.

Corrections found against the code

• The troubleshooting FAQ pointed at the target agent's Permissions tab; grants are made on the caller's tab.
• Schedule retries default to 0 in the UI and REST API. Only the MCP create tool defaults to 1.
• Workspace clients do see the live card.
• voice-replies.md: the Settings location and the speech-to-text fields.
• The sync-poll interval is a default, not fixed.
• Two heading anchors and a leftover issue link.

The FAQ grows from 474 to 499 questions. faq/README.md is regenerated from the page headings, which also fixes two underscore anchors that never resolved.

Related Issue

No issue. This is a periodic /generate-user-docs sync.

Journey Impact

Journey Impact: none: documentation-only change under docs/user-docs; no product code or user journey is modified

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update

Testing

• Relative link and anchor check: 0 broken across 110 pages
• Issue-number / internal-codename grep: 0 hits in added lines
• Deploy public-safety greps and the enterprise-docs-guard pattern: 0 hits
• Every factual claim in the new text was checked against the code (commit diffs, routers, Vue components, deploy scripts)

Mutation: n/a — not a fix

Checklist

• I have updated the documentation (if applicable)
• I have not committed any sensitive data (API keys, credentials, etc.)

🤖 Generated with Claude Code

[vybe]

Reviewed: docs-only sync; links, anchors, codename and public-safety greps verified clean.