fix(llm-wiki): restrict refreshes to configured providers

[ivankuznetsov]

Summary

• remove the shipped arbitrary refresh-command override identified by ClawHub's delayed semantic scan
• retain the explicit automation/provider consent gate and fixed Codex, Claude, Pi, and validated OpenClaw dispatch paths
• publish regenerated marketplace surfaces for llm-wiki 0.3.5 and document the security decision

Upstream

• vendors the provider-only dispatch change released as standalone llm-wiki v0.1.19

Verification

• package inventory validation passes
• deterministic package generation is current
• 69 offline tests pass
• local native Claude and OpenClaw discovery pass
• local Codex 0.144.6 and Pi 0.81.1 are newer than the CI pins, so their strict local version gates stop before discovery; hosted exact-pin legs are authoritative
• no live API-key tests were run