feat(backend): adapt every completion to the detected backend (workspace T-137)

One choke point in the sanitized client: the flavor is probed once
(the boilerroom wrapper names itself on /health, a bare llama-server
serves /props, Ollama answers neither) and every completion adapts.
The agents' tool_choice "required" survives only on Ollama — advisory
there, enforced by llama-server, an unbreakable tool loop through the
wrapper. Through the wrapper every completion carries webber's session
identity: session webber, eviction_order 20 in the decided ranking,
configurable via settings. The wrapper's balancing and compaction
signals are read from the response body's extra fields — an httpx
event-hook variant was tried and never fires under the openai SDK.

The enabling fix: the sanitized client was never in the request path.
The provider assigned self._openai_client, an attribute nobody reads —
OllamaProvider.client serves self._client — so every completion has
bypassed the null-content sanitizer since the class was introduced.
Exposed when the wrapper 503'd a session-less request the choke point
should have named; the client now goes through the constructor's
official openai_client parameter, and a wiring test pins
provider.client to the sanitized type. The same bug exists in tatlock
(its T-6, filed).

Verified against the live wrapper from the dev server: flavor
boilerroom detected, a tool-using explore run answered in 4.8 s with
no tool loop, webber resident at rank 20, and the wrapper parked
librarian and tatlock-experts to seat it — the ranking doing exactly
its job. Six new tests (227 green), five mutation-checked: the rank
default, the strip condition, the session-add condition, the
no-cache-on-failure rule, and the client wiring.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

webber-api/tests/test_ollama_provider.py

@@ -28,9 +28,15 @@ class TestSanitizedClientIsReachable:
         assert chat.completions is not None
 
     def test_provider_reaches_completions(self):
-        """The full chain an agent request walks, short of the network call."""
+        """The full chain an agent request walks, short of the network call.
+
+        Through `.client` — the property pydantic_ai actually reads. The
+        old assertion walked `_openai_client`, a lookalike attribute
+        nobody read, which is exactly how the sanitizer sat bypassed in
+        production until 2026-09-13.
+        """
         provider = get_ollama_provider()
-        assert provider._openai_client.chat.completions is not None
+        assert provider.client.chat.completions is not None
 
     def test_parent_lookup_survives_either_descriptor_shape(self):
         """openai has used both property and cached_property for `chat`.