fix(ci): retry transient deploy gate requests

[javaDevJT]

The scheduled production deploy at 4e71d679a5e8cd62d41ddb1725f259002bf5bb76 failed because a transient EAI_AGAIN DNS error from a GitHub Actions GET escaped the daily-CI gate. The gate now retries allowlisted transient transport and HTTP errors up to three attempts with bounded backoff, and fails immediately for permanent errors.

A workflow_dispatch route on main provides a real manual validation path. It requires successful same-day CI dispatched for the identical repository, main branch, and full SHA. Both current-main checks and the vulnerability gate remain in place before publication.

The CI workflow now runs focused tests for transient recovery/exhaustion, permanent errors, CI identity and conclusions, Detroit-day matching, and manual-event identity/branch checks.

Validation:

• node --test .github/scripts/wait-for-daily-ci.test.cjs — 10 passed.
• Both workflow YAML files parsed successfully; git diff --check passed.
• A fresh repaired-source GitHub Actions run is pending PR creation.