fix(release): capture protected Router refusal

[drewstone]

The protected Braid 0.3.4 task fails with RUNTIME_FINAL_ERROR. Add one raw Router request mode to the temporary release probe using the same protected credential and the exact request shape emitted by the installed CLI. Record redacted HTTP status, error, served model, usage, and measured cost. Preserve the existing Braid task mode; raw mode is diagnostic evidence and cannot satisfy the live release gate.

The raw request is one POST with a 30-second timeout, 32 visible and 64 total output tokens, and an observed USD 0.01 cost ceiling. It checks the official candidate archive identity before the request. Local fake-server smoke observed one POST and a sanitized 401 receipt without running a Braid task.

Validation: actionlint, Biome format/lint, node syntax check, local fake-server request/receipt smoke, and full pnpm check (running).

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[tangletools]

✅ Auto-approved PR — 3a011332

Blanket team auto-approval is intentional. The merge gates are CI and codex-p1.
No automated review runs on this PR. This approval rests on the rule above alone.

_{tangletools · auto-approval · reason: blanket_auto_approve · 2026-09-29T11:13:22Z}