CI-mirror diverges from GHA on live-service env (local green passed while a CI-only dep was missing)

[mortonanalytics]

Problem

During the PR #23 workflow, eight consecutive green local CI-mirror passes did not detect a failure that only surfaced on the GHA runner: the local environment had a live Ollama dependency the runner lacked. The whole premise of the local mirror is "green locally ⇒ green on GHA, so CI fires once" — this gap breaks that guarantee and costs an extra GHA round-trip.

Fix direction

Pin the mirror's live-service posture to exactly match the runner:

• Make IONE_SKIP_LIVE (and any live-Ollama/generator/critic/router toggles) identical between the local mirror script and .github/workflows/ci.yml.
• The mirror should refuse to report green under an env that CI would not run (e.g. assert IONE_SKIP_LIVE=1 where CI sets it, or fail loudly if a live service is reachable locally that CI cannot reach).

Acceptance

• A run that would fail on GHA for an env-parity reason also fails in the local mirror.
• The mirror documents which env vars must match CI and enforces them.