docs: auto-update for merged PRs (2026-09-12)

[aheritier]

Documentation updates

• fix(tui): allow editing pending messages #4248 – fix(tui): allow editing pending messages: Documented the new Alt+Up shortcut in docs/features/tui/index.md:
  • Added a row to the Keyboard Shortcuts table describing that it recalls all pending (steered/follow-up/queued) messages back into the editor.
  • Expanded the lean-TUI steering/follow-up paragraph to explain that Alt+Up withdraws still-pending messages (concatenated in send order) for editing, while messages the agent already picked up are left untouched.

PRs reviewed with no doc changes needed

• feat: add GET /api/sessions?active=true for lightweight attached-session listing #4244 (adds GET /api/sessions?active=true) — docs already updated in the source PR and are accurate.
• feat(share): sign a DSSE-wrapped in-toto statement, not just the YAML bytes #4238 (DSSE/in-toto signing for share) — docs already updated in the source PR and are accurate.
• feat(sandbox): add kubectl and aws cli to sbx-templates image #4218 (kubectl/aws-cli in sandbox image) — docs already updated in the source PR and are accurate.
• chore: bump direct Go dependencies (20 of 22) #4243, fix: always clone RuntimeConfig in LoadWithConfig to prevent race #4241, docs: update CHANGELOG.md for v1.138.1 #4240, ci: skip redundant main push checks #4237, fix(test): load HCL examples in live models check #4236, feat: add secure HTTP relay packages #4235, docs: auto-update for merged PRs (2026-09-11) #4234, test(tui): stop sidebar tests from reading the checkout's git branch #4231, fix(app): snapshot the session before spawning background goroutines #4230, ci: fix the failures in the new test-race job #4228, chore(deps): bump the actions group across 1 directory with 3 updates #4227 — internal/CI/dependency/test-only changes with no user-facing doc impact.

Source PR: #4248