consort 0.7.1 — Gemini cli transport pins the served model

gemini-cli (0.58.0, Vertex auth) rewrote any model id ending in flash to its own flash default: CONSORT_GEMINI_MODEL=gemini-3.8-flash reviewed as gemini-3.5-flash and only the CLI's session log said so. The cli transport now enables the CLI's pass-through resolver through a throwaway system settings directory (system-defaults path pinned, real system settings copied JSONC-tolerantly, fail-closed), runs every call with --output-format json and discards any run not served solely by the requested model; one stderr evidence line per call (tool calls, tokens). Stderr capture is resolved before the cd and created owner-only without a process-wide umask. See CHANGELOG 0.7.1 and PR #3.