Add focused tests for unauthorized DM behavior normalization

[aydnOktay]

Added a new focused test file for unauthorized DM behavior normalization.
Covered accepted values (pair, ignore), whitespace/case normalization, and default fallback for invalid/non-string inputs.

[aydnOktay]

I look forward to your review of this and my other PR's , sir @teknium1

[teknium1]

Thanks for adding direct coverage of the normalization contract. Current main still implements that contract in gateway/config.py:133-139, while the existing tests exercise configured behavior rather than the whitespace/case and invalid-input cases in this PR.

Problems

• The PR also includes unrelated changes to .github/workflows/supply-chain-audit.yml, agent/auxiliary_client.py, and run_agent.py; those are outside the stated gateway-test scope.
• The run_agent.py Codex hunk is stale: current run_agent.py:5328-5331 forwards API-kwargs construction to agent/chat_completion_helpers.py:666.

Suggested changes

• Retain the four focused assertions from tests/gateway/test_unauthorized_dm_behavior.py as a standalone test-only salvage.
• Review the CI, auxiliary-routing, and Codex behavior changes separately against their current implementations.

Automated hermes-sweeper review.

[aydnOktay]

Closing to concentrate review on a single linked product bug: #89979.