stop polling approval requests for anonymous visitors

[OsamaHaikal]

ElicitationForm polled GET /widget/v5/connections/elicitation/:session every 1.5 s for every active chat. The backend refuses anyone without a signed-in token carrying connection access, so anonymous embeds produced a steady stream of 401s (seen on the docs site on prod today).

Poll only when config.user.token is set; the explicit capabilities.connections: false opt-out still applies.

🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎🦎

Greptile Summary

This PR prevents ElicitationForm from polling connection approval requests unless the widget has a signed-in user token, while preserving the explicit connections capability opt-out.

• Adds coverage for anonymous, signed-in, and connections-disabled configurations.
• Adds patch release entries for the widget package family.
• Risk level: Low. The change narrows network activity for anonymous visitors without expanding authorization or data access.
• No database migrations or dependency additions are included.

Confidence Score: 5/5

Risk level: Low; the PR appears safe to merge because it only suppresses unauthorized anonymous polling and preserves signed-in polling.

The authentication guard matches the stated backend access contract, sign-in transitions remain reactive, token renewal continues using current credentials, and the focused tests cover the changed decision branches.

_{Reviews (1): Last reviewed commit: "stop polling approval requests for anony..." | Re-trigger Greptile}