fix(deep-journey): follow the run stream to the end, --no-stream included

[liady]

What

ax deep-journey --no-stream never finished a run: it waited about 15 minutes, then exited 3 with "still executing". ora saves a journey's final status only from inside the run's stream (GET /api/journey/runs/{id}/stream), and --no-stream only polled GET /api/journey/runs/{id}, so the run stayed running. The CLI now always reads a running journey's stream to its result or error frame. --no-stream now just hides the live trajectory view, so it prints the same final report and exit code as a streamed run.

Why

Only the stream route writes a finished run's status (completeJourneyRun in ora). The fallback for a stream that went quiet had the same problem, because it also switched to polling. ora's own docs said "stream or poll" until eralabs-ai/ora#1266 corrected them.

Changes

• performDeepJourney streams every running record.
  • A stream that drops or closes before its last frame is reopened up to 5 times, 2s apart. A reopen resumes the same run on ora's side and never re-runs the agent.
  • Polling the detail is now only the last resort, after every reopen fails. The run can still finish then if something else streams it.
  • Streaming and polling share one 15-minute budget, so a run that can't be followed fails at about 15 minutes. Without it, the worst case would have been about 27.
  • A stream 404 or auth error ends the command at once. A 429 waits out its Retry-After, up to 60s, before the next reopen.
• --no-stream now only suppresses onTrajectory. The flag help and README describe it as hiding the live view.
• The stream request now sends the partner key when one is set. A recognized key lifts the stream's 20-per-minute per-IP limit for a run that already exists, which reopens depend on.
• The "still executing" error, and the progress line when polling starts, now name the stream's last failure. The --help text and JSDoc no longer say --no-stream polls.

Checks

• pnpm lint, pnpm build, pnpm smoke and pnpm verify:pack pass locally.
• Typecheck and tests pass except in src/tunnel/, which needs the @ora-ai/tunnel-protocol dev dependency. It isn't installed in my checkout, and this PR doesn't touch that code.
• Tests cover the new behavior:
  • --no-stream still opens the stream and never calls onTrajectory;
  • a stream that closes early is reopened, not polled;
  • the partner key is sent on the stream;
  • polling happens only after 5 reopens;
  • a stream 404 fails fast;
  • a 429's Retry-After is waited out;
  • the 15-minute budget stops both reopening and polling.
  • The test for a run that never settles still ends in "still executing".