Ships the accumulated fixes to production: media-aware response cache key,
manual-disable is rotation-only (direct calls always allowed), per-rotation
provider disable via enabled:false, and request-scoped errors (404 no-vision-
endpoint / 400 bad-image / 429) no longer tripping the provider failure cooldown.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>