fix: address PR review feedback on no-auth mode and unread-count

- Add optional chain on history.messages before .at() call
- Check provider-specific chat history files (claude, codex) not just default
- Move no-auth exchange block after loopback address check
- Replace static "no-auth" token fallback with fail-fast sessionStore check
- Extract version-bump-check into its own workflow file

Author: shafty023

.github/workflows/version-check.yml

@@ -0,0 +1,31 @@
+name: Desktop Version Bump Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - "apps/desktop/**"
+
+jobs:
+  version-bump-check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Check desktop version bump
+        run: |
+          BASE="${{ github.event.pull_request.base.sha }}"
+
+          OLD_VERSION=$(git show "$BASE":apps/desktop/package.json | jq -r .version)
+          NEW_VERSION=$(jq -r .version apps/desktop/package.json)
+
+          if [ "$OLD_VERSION" = "$NEW_VERSION" ]; then
+            echo "::error::apps/desktop/ was modified but version in apps/desktop/package.json was not bumped (still $OLD_VERSION). Please bump the version."
+            exit 1
+          fi
+
+          echo "Version bumped: $OLD_VERSION -> $NEW_VERSION"