…y-pick #17948) (#17950)

Cherry-picked fix: correct environment variable name for MCP app status
slug (#17948)

Fixed environment variable name for app status slug in Claude MCP
configuration from `CODER_MCP_CLAUDE_APP_STATUS_SLUG` to
`CODER_MCP_APP_STATUS_SLUG` to maintain consistency with other MCP
environment variables.

This also caused the User level Claude.md to not contain instructions to
report its progress, so it did not receive status reports.

Co-authored-by: Thomas Kosiewski <tk@coder.com>

Cherry-pick of #17934

---------

Signed-off-by: Thomas Kosiewski <tk@coder.com>
Signed-off-by: Danny Kopping <dannykopping@gmail.com>
Co-authored-by: Thomas Kosiewski <tk@coder.com>

…ry-pick #17878) (#17960)

Cherry-picked fix: stop extending API key access if OIDC refresh is
available (#17878)

fixes #17070

Cleans up our handling of APIKey expiration and OIDC to keep them
separate concepts. For an OIDC-login APIKey, both the APIKey and OIDC
link must be valid to login. If the OIDC link is expired and we have a
refresh token, we will attempt to refresh.

OIDC refreshes do not have any effect on APIKey expiry.

#17070 (comment)
explains why this is the correct behavior.

Co-authored-by: Spike Curtis <spike@coder.com>

…sh` (cherry-pick #18093) (#18096)

Co-authored-by: Ethan <39577870+ethanndickson@users.noreply.github.com>
Closes #18088.

Co-authored-by: Atif Ali <atif@coder.com>

Co-authored-by: ケイラ <mckayla@hey.com>