feat: native provider request profiles for DeepSeek-compatible APIs

[SonAIengine]

Scope

One feature-sized change: explicit provider wire options and CLI profile/resume plumbing. All inference remains inside the XGENy provider, proposal validation, policy, capability, and durable journal path.

• Add explicit response formats json_schema (unchanged default) and json_object, plus thinking default/disabled/enabled. No endpoint hostname inference or silent fallback.
• Keep strict local envelope, schema, invocation, policy, and capability validation for JSON Object output. JSON Object setup/check is labelled host-validated, not a server schema guarantee.
• Persist non-secret wire options with serde defaults for existing profiles. Bind the options and inference limits into restart checks; altered profiles fail closed before another inference.
• Preserve credential handling, budgets, unknown-call recovery, and completed offline replay. Fix deferred resume to honor the selected profile inference limits.
• Document provider semantics in ADR-0042 and CLI profile resolution in ADR-0043.

Validation (local, no paid endpoint)

• Provider: 33 unit tests and 6 loopback HTTP integration tests passed; 1 explicit live-endpoint test intentionally ignored.
• CLI: 113 tests passed; 3 explicit live/go50902 tests intentionally ignored.
• Both packages: all-targets Clippy with -D warnings passed.
• Local fixtures cover both response formats and thinking settings, default/golden digest compatibility, non-default profile limits, changed-option resume rejection, and completed replay without provider/configuration access.
• Rustfmt and git diff --check passed for changed files.

No live DeepSeek quality/latency claim, production configuration change, deployment, or paid model call is included. Existing redacted durable progress remains; true model token streaming is pending and is not simulated here.

Review / rollout

Base verified as faccd76. Two commits: provider fbbe243 (same patch as 13dc9ab) and CLI 821c0a3. Root integration review and bounded real-provider smoke remain separate gates before production use.