M132 Group F — CC 2.1.133 OAuth + session + network fixes

First adoption PR for M132 (CC 2.1.133). 4 issues, all upstream breaking-fixes — no OrchestKit code changes, doc + matrix only.

Issues closed

#	Slug	What it fixes
1703	parallel-sessions-refresh-token-race-fix	Concurrent CC sessions no longer all 401 after refresh-token race wipes shared creds
1707	remote-control-stop-interrupt-fix	claude.ai Remote Control stop/interrupt now matches local Esc — queued messages advance after interrupting stuck tool
1705	mcp-oauth-proxy-mtls-fix	MCP OAuth respects HTTP(S)_PROXY / NO_PROXY / mTLS end-to-end (discovery, DCR, token exchange, refresh)
1706	mapped-network-drives-add-dir-fix	Read/Write/Edit on Windows mapped network drives via --add-dir / SDK additionalDirectories

Files touched

src/skills/configure/references/cc-version-settings.md — new ## CC 2.1.133 Settings parent + 4 subsections
src/skills/configure/references/mcp-config.md — MCP OAuth proxy/mTLS note
src/skills/chain-patterns/references/worktree-agent-pattern.md — concurrent-session stability note
src/skills/doctor/references/remediation-guide.md — "all sessions 401 at once" remediation
src/skills/mcp-patterns/SKILL.md — proxy-aware OAuth note
src/hooks/src/lib/cc-version-matrix.ts — 4 new entries with minVersion: '2.1.133'

Effect on cc-support-window-bump.yml

Adding entries to cc-version-matrix.ts triggers cc-support-window-bump.yml to auto-recompute the floor. Since the floor is already 2.1.138 (well above 2.1.133), no actual bump fires — but the matrix is now properly seeded for future support-window decay.

Verification

test:security    14/14 PASS
test:agents      37/37 valid
test:manifests   108 skills, 0 orphans, PASSED
typecheck        clean