feat(manager): add managed gateway account controls

[NWYLZW]

Summary

• add the Host-managed CLIProxyAPI gateway runtime and versioned upstream registry
• add external account status, toggle, OAuth, logout, and configuration controls
• package gateway configuration/schema resources and publish typed gateway/upstream entrypoints
• redact upstream management diagnostics before renderer delivery

Dependencies

This is an experimental, dependency-blocked Draft PR. It must not merge until the following public review branches are available and the exact commits pinned by this branch are reviewed together:

• Protocol managed-service and external-account contracts: feat(protocol): add managed service and provider contracts cordisx-protocol#139 at a1127780513b76f0c3b1acee70cd638b5348c6a5
• Host managed-service runtime and Manager integration: feat(host): add managed native model providers cordisx#396 at 071700425f44060693ecc9102de2227269a7536e

The dependency commits are review heads, not released package versions. Merge, release, deployment, and Mono pointer updates are outside this PR.

Verification

• npm run typecheck
• npm run build
• npm run typecheck:consumer
• all Node tests with --test-concurrency=2: 92 passed
• npm run lint
• npm run stylelint
• npm run format:check

Dependencies were reused from the accepted local preview without reinstalling or changing the running application.

The final Host review head passed a decisive empty-cache npm ci and real Git dependency prepare for this downstream installation boundary.

Provenance

The implementation was consolidated from local source commit a9e751e8deb86a6972a9fa544b8b2e82501bf678 onto current public main for review. The original branch and commit remain unchanged.