v0.114.0

## What's Changed
* feat(mobile): mobile app on by default (gate and web-mobile service), opt-out via env by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6219
* [fix] Use refreshed credentials for trace export by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6217
* [fix] Preserve Secret token timing and auth errors by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6218
* feat(services): allow extra CORS origins via AGENTA_SERVICES_ALLOWED_ORIGINS by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6180
* docs(design): starter-credits bridge and write-only secrets by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6183
* docs(design): runner-owned Pi trace export design and owner review by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6232
* [fix] Provision the runtime key in PR previews by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6235
* [docs] Reconcile Pi trace export contracts after review by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6237
* feat(runner): export Pi traces through the runner by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6223
* fix(sdk): strip a custom connection's model-key namespace even when a provider is set by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6179
* [fix] Record agent run cost on the workflow root by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6185
* [fix] Surface errored harness turns on Daytona sandboxes by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6137
* [feat] Map proxy budget refusals to a clear starter-credits message by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6168
* [feat] Write-only vault secrets (values never readable back by users) by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6164
* [feat] Managed vault secrets: platform-owned connections users cannot edit or delete by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6165
* [feat] Seed starter credits at signup via budget-capped proxy keys (EE) by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6138
* feat(api): let the provider probe use a stored secret by id by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6195
* [feat] Starter credits: minimal web changes (hidden managed connection, replace-only secrets, add-your-key on exhaustion) by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6174
* [fix] Keep workflow token totals authoritative by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6238
* [test] Align v0.114 release acceptance gates by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6239
* [test] Align SDK stream assertion with runner startup status by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6240
* [fix] Give the runner both canonical Agenta API URLs by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6241
* [fix] Keep workflow spans active across streamed generators by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6242
* [fix] Publish Pi usage before trace completion by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6243
* docs: draft v0.112.0 changelog entries by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/5989
* docs: announce Agenta on mobile by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6248
* fix(api): Refuse plus-tag emails for starter credits by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6258
* [fix] Resolve agent defaults from runnable models by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6259
* [fix] Restore missing agent approval after reload by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6262
* fix(agents): default to Gemini 3.7 Flash by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6264
* [release] v0.114.0 by @github-actions[bot] in https://github.com/Agenta-AI/agenta/pull/6221


**Full Changelog**: https://github.com/Agenta-AI/agenta/compare/v0.113.0...v0.114.0