C5: trading + data menus — cycles, fetch surfaces, typed contracts intact

[eaitbrahim]

Per the PRD §5 C5 + O3: the Trading menu (agent single-cycle [confirm], monitor poll, autonomy, record-flow, reset-hwm, resume-entries [typed], kill, resume [typed]) and the Data menu (fetch, fetch --check, repair gaps, freshness overview, db import). Every typed action keeps its typed prompt rendered in-console — identical prompts, logs, and audit events to the CLI; never piped or pre-filled. Acceptance: parity tests for the typed contracts; no TUI-originated order path that bypasses the agent pipeline.

[eaitbrahim]

C5 complete — merged in PR #405 (adversarially reviewed: one major fixed — the agent-cycle dispatch now suspends curses around the run, so on confirm-mode profiles the CLI's own order gate renders cleanly and the y/N is typed visibly, not blind under noecho; every prompt-capable blocking surface rides the one shared _run_terminal_form dance. Plus: sub-menu cursors reset on entry (closing kill's remembered-row + replayed-Enter accidental path while keeping the documented one-key contract), frozen-screen notices wrapped to 78 cols incl. the C4-era simulate notice, Ctrl-C disclosure on every blocking screen, dead params removed, m documented everywhere, the monitor interval rendered).

Trading menu: agent cycle (ARMED confirm — profile, mode, autonomy, session honesty — then run_agent_cycle with confirm_fn identity-pinned to the CLI's own gate: no TUI order path), monitor poll, autonomy (ON behind the CLI's extracted arm gate), record-flow/reset-hwm forms, resume-entries and resume TYPED (the CLI's own gates, constants identity-pinned, refusal writes nothing — proven end-to-end through the loop), kill one-key per its CLI contract (documented, cursor-reset protected). Data menu: fetch / fetch --check (ARMED plan; verdict pinned; the check never constructs a broker — proven structurally), repair gaps, offline freshness overview, db import (byte-pinned to the CLI's refusal). Extractions byte-compatible: trading/autonomy/db services. Session honesty lines render B1's recorded semantics. Gates: 3554 passed, 3 skipped; ruff/mypy clean.