chore(deps): bump geny-executor → 2.0.6 + slim down llm_patches.py

[CocoRoF]

geny-executor 2.0.6 (CocoRoF/geny-executor#208) absorbed four of the five compat patches that previously lived in `service/llm_patches.py`. This PR bumps the pin and removes the now-redundant Geny-side monkey-patches.

What landed in 2.0.6

• A. `--verbose` auto-injected when `--print --output-format=stream-json` is used (required by Claude Code CLI ≥ 2.1.x).
• B. `--bare` auto-stripped when no `ANTHROPIC_API_KEY` is in env, so the OAuth subscription path no longer crashes.
• C. Dropped the auto-`--tools ""` emit on MCP-configured spawns — CLI built-ins (`Bash` / `Read` / `Write` / `Edit` / …) now stay available alongside MCP-wrapped host tools.
• D. `StreamJsonAccumulator.finalize` (and `parse_json_output_to_response`) now drop the `tool_use` blocks the CLI dispatched internally, so Stage 10 naturally no-ops instead of ghost-erroring against the `mcp__geny__` ids it has no registration for.

Plus the executor lost the dead `copilot_cli` provider entirely (Geny removed its end in #827).

Pin bump

`>=2.0.5` → `>=2.0.6` in both `pyproject.toml` and `requirements.txt`.

`llm_patches.py` slim-down

830 → 479 lines (~350 lines deleted).

Removed:

• `_patched_argv` predicate (4 fixes A/B/C now native in 2.0.6)
• `_install_stream_accumulator_patch` (`tool_use` strip now native)
• Associated cached-wrapper bookkeeping for those installers

Kept (both Geny-specific):

1. Friendly Korean error messages for `is_error` stream-json result envelopes — auth-expired → Settings card hint, generic API errors → structured short message. Will fold upstream once the executor gains a proper i18n hook.
2. CLI-tool observability via the new `cli_stream_logger_ctx` ContextVar — taps `StreamJsonAccumulator.feed` to surface CLI built-in tool calls (`Bash` / `Read` / `Write` / `Edit` / …) into Geny's session log alongside the MCP tool entries that `mcp_bridge_controller` already emits. `mcp__*` prefixed names are skipped so the bridge-side log isn't double-rendered. Will fold upstream once the executor emits first-class CLI-tool events on the pipeline event bus.

Test rewrite

21 → 14 focused tests. Old tests covered the deleted `_patched_argv` predicate; new tests cover what's actually left:

• `_friendly_error_message_for_result_envelope` — 3 cases (auth, generic API error, CLI fallback).
• `_maybe_extract_error_envelope` — bytes/str input + 7 parametrised non-match cases.
• `install_llm_patches` idempotency + re-export coverage across the three modules that import the assembler.
• Assembler patch end-to-end: raises Korean friendly error on auth-failure envelope; passes through clean streams.
• Stream observability: emits `log_tool_use` for non-MCP tool blocks; skips `mcp__*` to avoid bridge double-render; emits `log_tool_result` with measured duration; handles both string and content-block-list result shapes; inert when no ContextVar is set.

Companion stages

• ✅ Stage 1: copilot removal from Geny (refactor(llm_backends): remove gh copilot CLI backend #827)
• ✅ Stage 2A+2B: executor 2.0.6 (2.0.6 — remove copilot_cli backend + upstream Geny CLI compat patches geny-executor#208)
• ✅ Stage 2C: PyPI 2.0.6 published + visible
• Stage 3 (this PR): pin bump + llm_patches slim-down
• Stage 4: deploy + verify all backends work end-to-end

🤖 Generated with Claude Code