fix: bind dispatch to fresh catalogs and verified provider results

[James3014]

Direct provider/model requests were advertised but rejected by the profile-only backend, catalog observations could disagree with dispatch validation, and provider output could be attributed to the wrong turn. This change carries exact selection and catalog evidence through preflight, worker startup and continuation, refreshes OpenCode and Cline catalogs, requires current-turn results, and freezes elapsed time after termination.

Cline ACP now configures and reads back the session's actual provider/model because the installed CLI accepts flags that its ACP entry point ignores. Explicit thinking remains rejected without a verified session-setting path. Missing, stale, or changed catalog evidence fails closed; discovery does not imply account entitlement, free pricing, calibration, or Nexus admission.

Related to #5, #15, #30, #58 and #59. Native ChatGPT MCP acceptance and controlled deployment are separate gates, so this PR does not close those issues or claim stable live dispatch. The dependent Swarm change is reviewed separately.

Independent verification on this split head: typecheck, all 34 server tests and diff checks passed. Worker-focused OpenCode/Cline catalog and profile/execution-contract tests passed. The combined candidate previously passed the full npm test chain plus standalone session tests; cross-platform CI for this exact PR remains required.

Current dependency rebind

Current head 8a8844d426d26d35a1c26a27af5b4ce0db33c0ac merges exact main 502b4f240200b5ca73ac504d6a2d719abc42c177 without rewriting branch history. The test command retains main CI wrappers and both catalog suites; server recovery wiring retains both catalog services. The previously accepted continuation fixture shutdown correction is applied separately. Exact-head continuation 9/9, typecheck, build and diff check passed. Merge-baseline affected tests passed 64/64 at predecessor 239fbfdc; that result is not a current-head rerun. Independent whole-source review accepted exact head with verification gaps: 114 reported tests across eight focused files passed, with no source blocker identified. CI run 34508772695 has passed Ubuntu and macOS; Windows remains in progress. The tested merge commit 37d3831 has the same tree as this Candidate. Integration still requires all three platform jobs to finish successfully. This is a required upstream dependency for #62; #62 acceptance does not approve this PR. No deployment or native-runtime acceptance is claimed.

[James3014]

Refreshing pull_request event after enabling fork Actions; no code/head change.

[James3014]

Refreshing pull_request event after fork-level Actions permission reset; no code/head change.