fix: guard withheld Codex error recovery by refresh ownership

Integrate current main and preserve successful-fetch evidence through reset admission. Clear only authorized connectivity errors while retaining trusted usage, credits, reset candidates, and sibling records.

Co-authored-by: olddonkey <olddonkeyblog@gmail.com>