feat(ack): add grok workers and allow --always-approve

Grok is a first-class worker CLI. Launcher argv includes --always-approve so
unattended tool calls are not blocked; sandbox stays required.

tests/test_ack_skill.py

@@ -27,6 +27,9 @@ class AckSkillContentTests(unittest.TestCase):
             "references/kickoff.md",
             "不要修改项目的 `AGENTS.md`",
             "当前会话担任 Coordinator",
+            "intents.testEnvironment",
+            "运行测试环境",
+            "运行版本发布",
         ):
             self.assertIn(expected, content)
 
@@ -128,7 +131,7 @@ class AckSkillContentTests(unittest.TestCase):
         ):
             self.assertTrue((ack_dir / relative_path).is_file(), relative_path)
         version = (ack_dir / "VERSION").read_text(encoding="utf-8").strip()
-        self.assertEqual(version, "0.15.0")
+        self.assertEqual(version, "0.17.1")
         self.assertIn(
             f'ackVersion: "{version}"',
             (ack_dir / "examples" / "tasks.example.yaml").read_text(encoding="utf-8"),