Track Qwen Code 0.19.6 upstream release

[a5c-ai]

Upstream version update: Qwen Code

• Previous graph version: 0.19.5
• Latest upstream version: 0.19.6
• Package checked: @qwen-code/qwen-code
• Install method/package: unchanged, npm install -g @qwen-code/qwen-code

Sources read:

• Release notes: https://github.com/QwenLM/qwen-code/releases/tag/v0.19.6
• npm latest check: npm view @qwen-code/qwen-code@latest version returned 0.19.6

Research summary:
The v0.19.6 release adds a bundled dataviz skill, nested subagents up to configurable depth, opt-in per-tool-call execution timeout, raised stream idle timeout defaults with an environment knob hint, daemon UI/provider status for vision model selection, session artifact APIs, mobile-mcp relative 0-1000 coordinates, web-shell slash command discovery, session restore/loading improvements, and several web-shell/serve/QQ bot security and reliability fixes.

Likely system impact:

• Skill inventory should include bundled dataviz.
• Subagent lifecycle/depth policy should model configurable nested subagents.
• Scheduler/launchBehavior metadata may need an opt-in per-tool-call execution timeout flag/setting once adapter exposure is confirmed.
• Stream timeout expectations should reflect the raised default and env knob.
• Daemon API metadata should add session artifact APIs and vision model status/selection.
• Mobile MCP coordinate normalization should support opt-in 0-1000 relative coordinates.

Migration notes:
No package/install migration was published.

Assimilation checklist:

• Update Qwen skill inventory: add bundled dataviz skill.
• Update subagent policy metadata: configurable nested subagent depth.
• Update scheduler metadata: opt-in per-tool-call execution timeout.
• Update daemon API graph: session artifact APIs and visionModelId provider status.
• Update mobile-mcp tool metadata: opt-in 0-1000 relative coordinate mode.

[a5c-ai]

Duplicate of #1170. See that issue for tracking.