0.5.8: Add hosted-agent authority and voicemail detection

[dimavrem22]

Executive Summary

Releases SDK and CLI support for Voice AI authority, voicemail control, and safe tool activity as version 0.5.8.

• Keeps Python, TypeScript, Rust, and CLI wire contracts identical.
• Preserves existing request bodies when new options are omitted.
• Adds no-call activity reads and saved-authority controls.

Description

This PR adds contact_scoped / yolo authority, enabled / disabled voicemail detection, all three call origins, effective Voice AI model/voice fields, and paginated tool activity across the Python, TypeScript, and Rust SDKs.

The CLI gains hosted-agent config and authority commands, paginated tool-activity reads, per-call authority selection, and --no-voicemail-detection.

Reason

Applications need typed access to the complete Voice AI API contract without constructing raw requests or depending on provider-specific vocabulary. The three SDKs and CLI must ship together so wire names, defaults, enums, webhook fields, and persisted call fields cannot drift.

Decisions

• Version every package and lockfile at exactly 0.5.8, one patch above 0.5.7.
• Model authority as exactly contact_scoped and yolo.
• Model voicemail detection as exactly enabled and disabled.
• Omit every new placement option unless explicitly provided.
• Preserve existing Rust positional methods and add options-based siblings.
• Parse missing or null legacy fields to their safe defaults.
• Keep tool arguments and provider execution details out of activity types.
• Require a compatible API release before publishing 0.5.8.

Testing

• Python: Ruff passed; 969 passed, 3 skipped.
• TypeScript: build passed; 991 passed, 3 skipped.
• Rust: formatting passed; 212 tests, two doctests passed, one doctest ignored.
• CLI: build passed; 83 tests.
• Real CLI execution test asserts the exact placement request body and rendered voicemail value.
• Authenticated no-call API smoke passed through Python, TypeScript, Rust, and CLI for identity lookup, config, call reads, all persisted fields, pagination, activity, and authority update/restore.
• Cross-language verifier found no remaining contract or version blockers.
• Public-surface audit found no provider, private infrastructure, credential, or personal-data leakage.

Compatibility

• Python and TypeScript omit unset request fields.
• Rust retains the existing placement entry points.
• Existing CLI commands serialize identically.
• Old clients retain contact-scoped authority and enabled voicemail detection.
• Webhook field names and enum values match the API in every language.

Release order

1. Deploy the compatible API and migrations.
2. Merge and publish SDK and CLI 0.5.8.
3. Update dependent applications after 0.5.8 is available.