fix(git-sync): refresh auto-pull tooltip; bump EE ref for webhook secret encryption

The auto-pull toggle tooltip claimed GitHub App repos would sync via
webhooks "in a future update"; webhook delivery now works, so describe
the webhook-vs-polling behavior accurately. Bump the EE ref to pick up
encrypting the webhook HMAC secret at rest.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/ee-repo-ref.txt

@@ -1 +1 @@
-19d1c453d4dcbd06cd1895396ba75c174085a976
+9b63de906b4d64b79ae29a3e78a99f508f9ec285

frontend/src/lib/components/git_sync/GitSyncRepositoryCard.svelte

@@ -543,7 +543,7 @@
 								options={{
 									right: 'Automatically deploy changes from Git',
 									rightTooltip:
-										'Windmill periodically checks the tracked branch and pulls new commits into this workspace. Repositories connected through the GitHub App will sync via webhooks in a future update.'
+										'Windmill deploys new commits from the tracked branch into this workspace. Repositories connected through the GitHub App sync instantly via webhooks; others are checked about every minute.'
 								}}
 								on:change={(e) => setAutoPullEnabled(e.detail)}
 							/>