Two #31-tick findings that would strand an unattended run. The qwen worker hit its weekly 429 mid-tick; the obvious fallback deepseek/deepseek-v4-pro is wrong because the deepseek provider has no models (only catalog overrides) and fails silently — the model lives on the go gateway as go/deepseek-v4-pro, with go/glm-5.3-flash the next rung. And the async subagent runner has died without persisting a session, so legs launch in the foreground and a dead worker is recovered by completing, never re-implementing. Closes #243