fix(agents): invalidate stale cli sessions on auth changes

src/agents/cli-runner.ts

@@ -33,6 +33,7 @@ export async function runCliAgent(params: RunCliAgentParams): Promise<EmbeddedPi
                 cliSessionBinding: {
                   sessionId: resultParams.effectiveCliSessionId,
                   ...(params.authProfileId ? { authProfileId: params.authProfileId } : {}),
+                  ...(context.authEpoch ? { authEpoch: context.authEpoch } : {}),
                   ...(context.extraSystemPromptHash
                     ? { extraSystemPromptHash: context.extraSystemPromptHash }
                     : {}),