feat(observability): correlate provider access outcomes

[robinbraemer]

Outcome

Adds an Effect-native, privacy-bounded provider-access telemetry lifecycle spanning AgentGateway authorization, the GitHub/OpenAI credential adapters, and terminal provider outcomes.

• continues valid W3C trace context through external authorization
• classifies Kubernetes, PostgreSQL, OpenFGA, credential-adapter, authorizer, and provider failures before public error reduction
• records finite route/adapter/provider/decision/dependency/credential/provider-outcome dimensions while keeping identity and policy identifiers span-only
• exports the authorizer and GitHub broker over OTLP through the Fleet collector
• keeps telemetry fail-open and omits bodies, credentials, provider identity, and arbitrary headers

Verification

• mise exec http:bun -- bun run check
• git diff --check
• all relevant Kustomize trees rendered successfully
• disposable Kind access-conformance proof: 2 tests passed; cluster removed and context restored
• live collector Docker E2E: 5 tests passed

Advances #96.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	agentos-site	0983e8a	Commit Preview URL Branch Preview URL	Aug 03 2026, 07:21 PM