Reflect current GMAIL_USER/GMAIL_PASSWORD usage and keep optional CloudMail/grok2api vars.
Overwrite previous grok-keygen contents with the local registration/CPA protocol codebase (secrets and runtime data excluded).