feat(menubar): separate Claude rings per account/organization and config profile in Capacity Dock (#1757)

[ozymandiashh]

Summary

Closes #1757

• Separate Claude rings in macOS Capacity Dock: Adds CodeBurnCapacityDockClaudeProfiles (Combined / Separate rings) to CapacityDockPreferences and Settings → General → Capacity Dock whenever more than one Claude profile (Personal + Team organizations, or multiple claudeConfigDirs) is discovered.
• Per-profile quota, live sessions and Today totals: In Separate rings mode, expands CapacityDockProvider.claude into one captioned ring per profile (Personal, Codeburn, etc.), each with its own live quota windows, its own claudeConfigSourceId-scoped liveSessions, and its own Today totals in the hover glance popover (Claude · <Profile>).
• Multi-account & Keychain credential resolution: ClaudeCredentialStore prefers fresher Keychain/Desktop credentials when a file credential has expired, supports Claude Code-credentials-<8-hex-sha256> for non-default config directories, and reads per-organization credentials from claude-org-credentials.json / claude-org-profiles.json.
• Headline window when seven_day is null: Updates QuotaSummary.headlineWindow and AppStore.buildClaudeQuotaSummary so model-scoped Weekly · <Model> windows (such as Weekly · Fable: 0%) do not shadow an active 5-hour window when unscoped Weekly is null.

Testing / Verification

• I have tested this locally against real data (not just unit tests): verified on macOS with Personal (Max 20x, Weekly 11%) and Team (Codeburn — Team Premium, 5-hour 20%) subscriptions; Separate rings renders two captioned Claude rings (Personal and Codeburn) with their independent quota windows and Today totals.
• swift build and swift build -c release succeed cleanly.