dhpk-cli-transportlisted

# Internal CLI transport This is an internal support package. The canonical dispatcher creates a `dhpk.dispatch.request.v2` with separate Host, Provider, Provider-scoped Model, canonical Role, Effort, Transport, authority, scope, timeout, task identity, and immutable prompt evidence. The Codex and AGY compatibility adapters translate that request to the existing `0600`, regular, non-symlink `dhpk.cli.context.v1` boundary and invoke `scripts/run-cli-transport.py`; they never derive authority, select a role, or inherit an unbounded `PATH`. The runner accepts only a request file, owns timeout observation and receipt containment, and emits one terminal `dhpk.cli.receipt.v1` with its immutable follow-up record embedded atomically. The adapter seam also normalizes the same outcome to `dhpk.dispatch.receipt.v2`, preserving Host, Provider, Model, Effort, Transport, fallback history, and independent verification. It intentionally does not select a Provider or retry a Provider through a different Transport. Direct legacy wrapper calls without `DHPK_CLI_TRANSPORT_CONTEXT` are `BLOCKED`; provider commands never start. The dispatcher may attest one `failure_class` on a request. It is transport evidence, not a switching instruction, and must be one of `CLI_UNAVAILABLE`, `AUTHENTICATION_OR_MODEL_UNAVAILABLE`, `QUOTA_OR_RATE_LIMIT`, `SAFETY_OR_USER_DENIAL`, `TASK_OR_SEMANTIC_FAILURE`, or `TIMEOUT_OR_INTERRUPTION`. A contained timeout is classified as `TIMEOUT_OR_INTERRUPTION` in the termi