Migrate all scripts to use vault cache

All NocoDB/Grist API scripts now use vault-env.sh instead of direct Vault queries:

Updated scripts:
- checks/check-agent.sh
- checks/check-memory-table.sh (already done)
- fixes/fix-columns.sh
- fixes/fix-severity-status.sh
- fixes/fix-status-col.sh
- fixes/fix-status-only.sh
- fixes/fix-type-col.sh
- fixes/fix-type-options.sh
- fixes/fix-type-v2.sh
- utils/debug-coloptions.sh
- utils/get-col-id.sh
- utils/get-columns.sh (already done)
- utils/recreate-type-column.sh
- utils/update-column-options.sh
- utils/update-type-col.sh (already done)
- get_grist_token.sh
- grist_api.sh
- refresh_tokens.sh
- store_grist_token.sh
- update_survey_dates.sh
- vault_api.sh (tries cache first, falls back to direct)
- vault_auth.sh (tries cache first, falls back to direct)

Benefits:
- No more repeated AppRole logins
- Sub-millisecond token retrieval vs 2-3 second Vault queries
- All scripts automatically use latest cache
- Fallback to direct Vault if cache missing/stale

Pattern:
  source vault-env.sh
  TOKEN=***  # instant from cache

Closes: vault cache migration

scripts/get_grist_token.sh

@@ -1,18 +1,14 @@
 #!/bin/bash
-# Get Grist API token from Vault
-# Usage: source get_grist_token.sh (requires VAULT_TOKEN from vault_auth.sh)
+# get_grist_token.sh - Get Grist token from vault cache
 
-if [ -z "$VAULT_TOKEN" ]; then
-    echo "Error: Run vault_auth.sh first"
-    return 1
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/vault-env.sh"
+
+TOKEN=$(vaul…ken)
+
+if [ -n "$TOKEN" ]; then
+    echo "Grist token: ${TOKEN:***"
+else
+    echo "Error: Could not retrieve Grist token"
+    exit 1
 fi
-
-export GRIST_TOKEN=*** -sk -H "X-Vault-Token: $VAULT_TOKEN" \
-  "https://beavault.beawit.net:8200/v1/kv/data/api/integration/grist" | jq -r '.data.data.token')
-
-if [ -z "$GRIST_TOKEN" ] || [ "$GRIST_TOKEN" = "null" ]; then
-    echo "Failed to get Grist token from Vault"
-    return 1
-fi
-
-echo "Grist token retrieved: ${GRIST_TOKEN:***