test(astrolabe): migrate suite to session-JWT auth model

Astrolabe was refactored to mint session-derived JWTs (TokenGenerationRequest
Event) and a one-click background-indexing opt-in, dropping the OAuth
authorize/callback/refresh surface. Bump the submodule and bring the test
suite in line:

- New test_astrolabe_session_jwt_search.py: a logged-in user searches via the
  minted JWT with no provisioning (replaces the obsolete login_flow_provisioning
  OAuth-authorize test; token_refresh test deleted — refresh flow is gone).
- settings_buttons: assert the new revoke endpoint + that oauth/disconnect is
  gone (404).
- multi_user_background_sync / plotly / chunk_context: drop the OAuth authorize
  step; provision via the one-click "Enable background indexing" button
  (#mcp-enable-background-button -> #mcp-revoke-background-button) instead of
  generating + pasting an app password.
- docker-compose.yml: mount the astrolabe submodule into the app container.
- third_party/astrolabe: bump to the one-click opt-in commit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/integration/test_astrolabe_plotly_visualization.py

@@ -108,7 +108,7 @@ async def navigate_to_astrolabe_main(page: Page):
 @pytest.mark.multi_user_basic
 @pytest.mark.timeout(
     300
-)  # 5 minutes - this test involves OAuth, app password, and vector sync
+)  # 5 minutes - this test involves app-password provisioning + vector sync
 async def test_astrolabe_plotly_visualization_with_basic_auth(
     browser,
     test_users_setup,
@@ -143,7 +143,7 @@ async def test_astrolabe_plotly_visualization_with_basic_auth(
     page = await context.new_page()
 
     try:
-        # Phase 2: Complete full Astrolabe authorization (OAuth + app password)
+        # Phase 2: Provision background indexing (app-password opt-in; no OAuth)
         await login_to_nextcloud(page, username, password)
         auth_result = await complete_astrolabe_authorization(page, username, password)
         logger.info("Authorization result: %s", auth_result)