fix(core): integrate safe file rejection diagnostics into beta

[sam2tom]

Beta integration

Apply the reviewed environment file rejection diagnostic from commit 914e1d3 (PR #14) to beta baseline 8aebb6c. Preserve beta runtime readiness and lease changes; resolve only the translated operations source hash and update the beta integration ledger.

The handler logs one safe rejection event with request/trace correlation and finite reason/code classifications. It does not change HTTP responses, authorization, execution, database schema, Runtime/helper protocols, or selected templates.

Validation and deployment

• Full API package tests passed on this beta integration.
• Four focused diagnostic race tests passed.
• Eleven documentation/navigation/translation/hash/structure checks passed.
• Deploy the actual merged beta SHA through core-deploy from main, source_branch=beta; matching Core and Web only, retaining the selected Runtime template.
• Verified current deployment/rollback baseline: 8aebb6c.
• No paid model or new Runtime reproduction is included; deployment health will not be described as upload recovery.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-07T15:02:22.656368Z	61b7318	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.