fix(providers): restore specialty validator dispatch for web-cookie providers (+ restore-green for #4440/#4443 baselines)

[diegosouzapw]

Summary

• Bug. PR feat(providers): improve no-auth and web-cookie provider validation #4023 introduced a generic web-cookie /models probe in validateProviderApiKey that silently took precedence over the per-provider specialty validators (13 providers: qwen-web, grok-web, chatgpt-web, claude-web, gemini-web, copilot-web, deepseek-web, perplexity-web, blackbox-web, muse-spark-web, t3-web, adapta-web, inner-ai).
• For qwen-web specifically this regressed the body-check fix from fix(qwen-web): cookie validation false-positive - check response body for user object #3958 — the generic probe accepts any 200 as valid, where the specialty validator inspects data.user on /api/v2/user to detect expired sessions that still return 200 (Qwen's actual behavior). Every other specialty web-cookie validator was equally bypassed.
• Fix. The dispatcher now gates the generic probe on a WEB_COOKIE_PROVIDERS_WITH_SPECIALTY_VALIDATOR set, so providers with bespoke validators reach them again.
• Restore-green bonus. Folded the two file-size rebaselines that were merged with --admin (fix(pricing): align Claude Code (cc) model pricing with Anthropic #4440 pricing.ts, fix(executors): granular reasoning_effort handling for Claude models on Copilot #4443 base.ts) into this PR so the fast-gates job goes back to green in one shot.

Test plan

• TDD red→green on the existing regression test tests/unit/qwen-web-cookie-validation-3958.test.ts (was failing on the tip of release/v3.8.32; passes after the fix).
• New invariant test tests/unit/web-cookie-specialty-dispatch.test.ts enforces (a) every entry in the override set is a real web-cookie provider, and (b) qwen-web's dispatch hits /api/v2/user, never /models.
• Related validation test suites (provider-validation-specialty, provider-validation-hardening, provider-validation-azure-vertex, the existing qwen-web test, the new invariant test): 131/131 passing locally.
• npm run check:file-size, npm run typecheck:core, npm run lint — all clean.

File-size rebaselines (documented in config/quality/file-size-baseline.json)

File	Was	Now	Reason
src/lib/providers/validation.ts	4518	4556	+38 — this fix (gate + comment + test-export const)
src/shared/constants/pricing.ts	1620	1623	+3 — drift from #4440 (CC pricing alignment) merged with --admin
open-sse/executors/base.ts	1399	1407	+8 — drift from #4443 (granular reasoning_effort) merged with --admin

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[diegosouzapw]

Fechando como superseded. O conteúdo deste PR aterrissou em release/v3.8.32 dividido em peças estreitas:

• Fix do web-cookie validator (shadowing) → mergeado via fix(providers): generic web-cookie validator must not shadow per-provider validators (#4023 regression) #4467 (1e7264359): move o dispatch genérico para depois de SPECIALTY_VALIDATORS (fallback), restaurando provider-validation-specialty 112/112 + web-cookie-auth007 5/5 (117/117 no tip). Rebaseline validation.ts 4518→4522.
• Restore-green dos baselines fix(pricing): align Claude Code (cc) model pricing with Anthropic #4440/fix(executors): granular reasoning_effort handling for Claude models on Copilot #4443 → já feito no reconcile chore(quality): reconcile file-size + complexity baselines after /review-prs mine r2 #4461 (pricing.ts 1620→1623, base.ts 1399→1407 + complexity 1905) e na metade pricing do fix: restore-green v3.8.32 Fast-QG — OpenAI pricing rows + web-cookie validator shadowing (#4023) #4447.

Como as duas metades já estão na release (e este branch ficou CONFLICTING contra elas), não há nada a mergear aqui. Reabrível se necessário.