Fallback also triggers on thread/start crash with explicit HTTP code

Live test found the gap: a nonexistent model fails in
thread/start, host.py exits non-zero without JSON, so the
executor result has host_status=None and the worker never
fell back (task failed, no worker_fallback audit). When
host_status is absent, worker now extracts an explicit signal
from stdout/stderr/runner error: 404/429/5xx codes, or
'model not found' style text (counted as 404). Generic
failures with no explicit code still do not fall back, and
401 in stderr still never falls back. Tests: fallback 9 pass,
cloud 333 pass, host 27 pass.

cloud/worker.py

@@ -909,6 +909,44 @@ class Worker:
             return "host_status=%s" % token
         return stdout.strip() or "host execution failed"
 
+    def _fallback_token(self, result, error):
+        """一次失败尝试的可 fallback 信号（host_status 为空时的兜底）。
+
+        坏模型最常见的真实失败不在 turn 里，而在 thread/start：
+        host.py 的 create_thread 抛 RuntimeError、进程非 0 退出、
+        不打印 JSON，于是执行器结果的 host_status 为 None，旧逻辑
+        因此永远不 fallback（主机实测：坏模型任务直接 failed、
+        无 worker_fallback 审计）。此时从 stdout/stderr/runner 异常
+        文本里找显式 HTTP 状态码（404/429/5xx）或“model not found”
+        类文本，前者按码判断，后者按 404 计；找不到显式信号时
+        返回 None，绝不凭“host execution failed”这类通用文本猜测，
+        否则任何执行器故障都会被误当成模型故障换模型烧额度。
+        """
+        host_status = (result or {}).get("host_status")
+        if host_status is not None:
+            return host_status
+        combined = " ".join([
+            (result or {}).get("stdout", "") or "",
+            (result or {}).get("stderr", "") or "",
+            error or "",
+        ])
+        if not combined:
+            return None
+        lowered = combined.lower()
+        if "model not found" in lowered or "unknown model" in lowered \
+                or "no such model" in lowered:
+            return "404"
+        match = re.search(
+            r"(?:http/|status[\"':\s]{0,10}|code[\"':\s]{0,10}|error[\"':\s]{0,10})"
+            r"(404|429|500|502|503|504)\b",
+            combined, re.IGNORECASE)
+        if match:
+            return match.group(1)
+        match = re.search(r"\b(404|429|500|502|503|504)\b", combined)
+        if match:
+            return match.group(1)
+        return None
+
     def run_one(self, task=None):
         """认领并执行一个任务，返回结果 dict（见模块 docstring）。
 
@@ -1002,7 +1040,7 @@ class Worker:
                 break
             if result.get("status") == "completed":
                 break
-            host_status_try = result.get("host_status")
+            host_status_try = self._fallback_token(result, error)
             if host_status_try is None and \
                     result.get("status") == "timeout":
                 # 进程/容器超时路径的 host_status 为空，超时本身就是