fix: 9.5-code reachable items (parse unification, goal branch, fail-open logs, M7 test, fingerprint)

Parse: agent_tools/tool_approvals column parsing unified into agent_def shared helpers (parse None = undeclared; server keeps None, worker maps to []/{} at _task_from_row, dispatch behaviour unchanged). Goal: _apply_resume_preamble goal branch proven reachable via _goal_convert_queued on a queued auto-resumed task, kept with a test and corrected docs (not dead code). Fail-open: audit write failure and preamble lookup failure now log warnings (best-effort unchanged); partial policy failure and shadow parse drops documented as known gaps. M7: shadow endpoint explicit_capability_failures_truncated test. Fingerprint: RoutingPolicy.content_fingerprint (canonical JSON sha256, version excluded) surfaced only in dry-run output, never in audit rows. M1 wording: legacy gap stated as fixed stock persisting per-task until completion, not converging.

cloud/routing_shadow.py

@@ -68,6 +68,12 @@ def parse_worker_routing_detail(detail):
 
     Old format (no suggested/chosen) parses with both models None.
     A ``-`` placeholder also means None, never a model named "-".
+    9.5-code fail-open 清单：解析失败的行返回 None 后在
+    evaluate_shadow 里直接跳过、不计数、不报错——样本无
+    声消失（例如模型名含空白会使整行匹配失败，见 M7）。
+    这是已知缺口：改返回类型会牵动评估函数与端点，本轨
+    只在此处写明，不改语义；运营方无法从报告里看到丢
+    了多少行，只能靠审计行总数与样本数对不上来发现。
     """
     if not isinstance(detail, str):
         return None