fix(cli): classify cloud failures by HTTP status
Summary
Classify cloud failures by HTTP status: preserve 401/403 authentication errors and give 429/5xx typed retry metadata. Classify status before JSON parsing. Omit rejected bodies and malformed-success parser causes that can expose private text.
Four files changed. Closes #4376; part of #4368. Review follow-up strengthens malformed 401/403 and private JSON error fixtures.
Validation
Head f4107ec6923b1b4d1f9802c12380836e5f9d1511. Formatting and 46 focused caller/parser tests passed. Current-head receipt and skip ownership: all eight runnable affected checks passed, including the full unit fallback, with exactCommit: true and checkoutChanged: false.
Base/head regression proof remains attributed to prior 9f634f8; production code is unchanged by the fixture follow-up. Terra reviewed the intermediate implementation; the coordinator checked its correction. No new independent whole-final-head source review is claimed.
Current-head CI: 16 successful checks, one cache job skipped. Review threads resolved. Apex hides one below-threshold item; no actionable finding is published. No live device run applies to this CLI HTTP classification. CI-owned/manual skipped lanes are not local passes. No merge is authorized.