Interrupt cyber model turns after one Guardian denial

[copyberry]

Interrupt cyber model turns after one Guardian denial

What changed

• Add a Guardian circuit-breaker policy for models whose catalog specialty is
  cyber.
• Interrupt those models after the first Guardian denial while retaining the
  existing denial thresholds for other models.
• Centralize the cyber model-specialty identifier for use across core,
  protocol, app-server, and TUI code.

Testing

• Cover the cyber-specific threshold in the circuit-breaker unit tests.
• Verify end to end that a denied command is not executed and the turn is
  interrupted after one denial.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}