refactor: collect provider facts before presentation

[tttboy123]

Summary

• add stable Provider descriptors plus typed quota and balance collection results with attempt-specific source attribution
• move Codex, Kiro, MiniMax, Step Plan, Generic HTTPS and Moonshot headless collection off ProviderCard side channels
• remove false quota-card registrations for OpenAI Organization and custom usage/cost feeds while preserving their explicit provider identity
• keep legacy cards only as a presentation compatibility path and leave OpenUsage discovery for WQ-19B after WQ-20 freezes openusage-export/v1

Safety and compatibility

• no Local API v1 or SQLite fact-schema change
• no credentials, raw provider payloads, prompt/response content or direct account identity added
• Keychain failures become sanitized typed failures
• empty or failed direct results preserve last-good facts through existing ledger semantics

Verification

• Python: 915 tests passed
• Swift: 257 tests passed with warnings as errors
• Swift product line coverage: 87.70%
• dependency audit: no known vulnerabilities
• release secret scan: 0 matches
• privacy scan: 0 matches
• release metadata: 0.6.0 build 9 valid
• complete scripts/build_app.sh release gate passed and produced the app bundle

Queue boundary

Completes WQ-19A. WQ-19B remains open and depends on WQ-20.