Unity CLI 1.0.0.20013 aflaai

Highlights of 1.0.0-beta.13 (full notes at the release notes URL):
- unity mcp now reads UNITY_PROJECT_PATH when you don't pass --project-path, the way unity command, list, job and status already do.
- unity setup codex and unity setup grok install Unity's agent plugin, with its Unity skills, into Codex and Grok Build in one step, the way unity setup claude does for Claude Code.
- On a Mac with Apple silicon running macOS 28 or later, unity releases no longer lists Intel (x86_64) Editor builds, which can't run without Rosetta 2. Earlier macOS versions still list both, as unity install and unity editors upgrade already did.
- unity projects upgrade into Unity 6.7 or later now needs a Unity Cloud choice when the project isn't linked: --cloud links it to a new Unity Cloud project, --cloud-project <id-or-name> links an existing one, and --no-cloud upgrades without linking.
- unity open and unity projects open no longer move a project onto Unity 6.7 or later.
- unity install with --changeset, and unity editors add and unity editor module refresh when they read an Editor's build from the download server, now refuse a changeset that is not letters and digits, and a manifest file name from the server that is not a plain file name.
- Setting UNITY_PEER_AUTH_MODE=identify-only no longer weakens your real sign-in: a broker started that way runs as a separate dev broker with its own address and its own sign-in, never reads yours, and on macOS and Windows refuses Unity-signed applications.
- The CLI now checks that the sign-in service it talks to is genuine Unity software and that it checks the apps that connect to it.