fix: harden cc reliability for v1.7.4

[CBEPX]

Summary

• make peer stdin transport reliable for delayed and large pipes, complete generated recipes, and keep mutation receipts bounded
• preflight deterministic peer failures before job creation while preserving authoritative CAS drift checks
• classify Claude structured terminal failures consistently and keep trusted auth/rate/terminal categories ahead of text heuristics
• freeze the audited annotationless MCP tool registry and document exact-ref installation/qualification
• refresh vulnerable transitive development dependencies and prepare v1.7.4 metadata

Review evidence

• independent task reviews: approved
• whole-branch Codex review: three blockers found and fixed
• Claude Opus adversarial review: high stderr-rate finding fixed; intentional fail-closed/backward-compatible contracts retained
• Claude Fable review: correctly terminated as claude_rate_limit with requested/final model telemetry and no fallback

Local verification

• npm run check: 958 unit, 120 integration, 24 E2E — pass
• Node 18.20.8: 958 unit, 120 integration — pass
• npm run test:coverage: 1102/1102; 92.72% lines/statements, 83.9% branches, 98.29% functions
• npm run test:mutation:pr: critical 82.65%, managed 74.69%, installer 66.39% — pass
• full and production npm audit: 0 vulnerabilities
• npm ls --all: clean
• packed Node 18 smoke: pass

Closes #26
Closes #32
Closes #33
Closes #35
Closes #40
Closes #41
Closes #42
Closes #43
Closes #44
Closes #47
Closes #48

Follow-ups remain open: #27, #45, #46, #49.