Provider boundaries and controlled failures

AI provider boundaries, timeouts and bounded retries

Test limited transient retries, rate-limit stops and malformed responses with an offline fake; keep network deadlines and semantic correctness separate.