v1.7.0 providers: qualify Codex and Claude service-mode supervisors

[jeffhuber]

Part of #1096.

Goal

Qualify Codex and Claude as interchangeable service-mode Operator supervisors against the same provider-neutral contract.

Scope

• Maintained service-mode adapters for instruction delivery, structured decisions, usage metadata, cancellation, timeout, and uncertain completion.
• Equivalent owner-action and recovery semantics.
• Isolated credentials and bounded provider concurrency.
• Comparable fixtures and live bounded canaries.

Acceptance criteria

• Either provider can acquire the Operator lease and drive the same synthetic work queue.
• Both emit the same versioned decision/result contract.
• Provider-specific output never enters cloud telemetry.
• Timeout, malformed result, auth loss, quota/rate limit, cancellation, and restart cases fail closed.
• Each provider completes at least one bounded pilot delivery reviewed by an independent eligible peer.

Code Mower delivery

One provider-qualification PR after the runtime contract is stable. Record comparable latency, reliability, usage, intervention, and review-finding dispositions without uploading private content.