fix: make internal research runs resumable

[ga1ien]

Replaces the single long-lived internal HTTP request with protocol-v2 durable submission and polling.

• retries transport loss with one idempotent request ID
• supports explicit request-ID reattachment
• rejects legacy streaming-only catalogs before spend
• records durable run identity in metadata
• documents deployment exclusion and recovery
• bumps the release to 0.8.1

Verification:

• 56/56 unit and contract tests
• 8/8 Instagram provider-boundary tests
• TypeScript and build
• transport-loss reattachment integration test
• clean packed CommonJS/ESM/CLI imports
• zero production dependency vulnerabilities
• tarball Gitleaks and high-confidence secret scan