feat: release 2.1.0 with optional Flash final AI review

Default Flash final review to off and persist the setting across the UI,
MCP, SDK and queued tasks. Keep execution separate from test verdicts.

Bundle UI fonts and licenses to remove Google Fonts from startup builds.
Align backend/frontend versions and document installation and upgrades.

tests/unit/sdk/test_agent_trace_finalization.py

@@ -114,11 +114,24 @@ async def test_locked_work_profile_does_not_block_unlocked_device_owner():
 
 
 @pytest.mark.asyncio
-async def test_agent_inherits_session_id_from_env_and_propagates_to_tracing(monkeypatch):
+@pytest.mark.parametrize(
+    "profile,enabled,expected",
+    [
+        ("flash", False, False),
+        ("flash", True, True),
+        ("Flash", False, False),
+        ("pro", False, True),
+        ("pro", True, True),
+    ],
+)
+async def test_agent_inherits_session_id_from_env_and_propagates_to_tracing(
+    monkeypatch, profile, enabled, expected
+):
     import uuid
 
     canonical_sid = "a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d"
     monkeypatch.setenv("ARTEMIS_SESSION_ID", canonical_sid)
+    monkeypatch.setenv("ARTEMIS_FLASH_FINAL_CHECK_ENABLED", str(enabled).lower())
 
     agent = Agent()
     assert agent._session_id == canonical_sid
@@ -127,7 +140,7 @@ async def test_agent_inherits_session_id_from_env_and_propagates_to_tracing(monk
     task.id = "fallback-id"
     task.get_name.return_value = "task-name"
     task.request.goal = "test goal"
-    task.request.profile = "flash"
+    task.request.profile = profile
     task.request.task_name = "task-name"
     task.request.trace_path = "traces"
 
@@ -138,6 +151,7 @@ async def test_agent_inherits_session_id_from_env_and_propagates_to_tracing(monk
         mock_data_engine_cls.return_value = mock_data_engine
 
         agent._prepare_tracing(task=task, context=context)
+        assert context.execution_setup.final_check_enabled is expected
 
         mock_data_engine.start_session.assert_called_once()
         call_kwargs = mock_data_engine.start_session.call_args.kwargs