buzz-acp: record explicit terminal outcomes

[cmcgrabby-hue]

Summary

• classify ACP/provider errors without exposing raw provider messages
• correlate queue admission, worker, provider turn, retry attempt, and terminal outcome
• record explicit signed, requeued, dead-lettered, or abandoned terminal classes
• preserve intact application-error workers while retaining scoped respawn behavior for fatal outcomes

Verification

• named two-worker / three-queue regression: 1 passed, 0 failed
• buzz-acp package: 951 effective checks passed, 0 failed, 1 ignored
• full just ci: exit 0
• git diff --check: clean

Safety boundaries

• correlation IDs contain only channel/event IDs hashed with SHA-256
• raw provider messages, prompt bodies, tokens, and secrets are excluded from terminal observer frames and application-error logs
• no queue replay, live install, agent restart, or business-system mutation

Linear: OPS-13

[github-actions]

🔐 Codex Security Review

Status: review required for the current range.

The current range is 4e1770aa3ee7552e2bb50e897e113c22e30488de...9b8b1644d01ce8ef8940afaf02f4d4411eb38ad1.
A new review must complete for this exact range. When manual authorization
is required, a Block organization member must comment exactly
@buzz-security-review 9b8b1644d01ce8ef8940afaf02f4d4411eb38ad1 to authorize a new review.
Any previous review applies only to its recorded range.