Telegram polling resilience and externalized provider plugins
- Telegram ingress moved to an isolated worker with a durable local spool so polling survives main-loop stalls
- Externalized Amazon Bedrock, Slack, OpenShell sandbox and Anthropic Vertex so installs only pull what you use
- Sandbox blocks Windows USERPROFILE home roots so credential-bearing binds (.codex, .openclaw, .ssh) are denied
- Added acp.fallbacks so ACP turns try backup runtime backends before any output is emitted
- Control UI/WebChat persisted auto-scroll mode selector (follow streaming, near-bottom, or off)
- Stale long-poll offsets discarded after Telegram bot token rotation so bots no longer silently skip messages