feat(openclaw): upgrade fleet to DeepSeek V4.1 Flash 1017 and harden operations

- Upgrade OpenClaw primary model from deepseek-v4.1-flash to deepseek-v4.1-flash-1017 across all interactive agents, heartbeats, compaction, and cron jobs.
- Configure hardened OpenRouter provider routing for 1017 (deepinfra, inference-net, parasail, cloudflare) with strict fp8/bf16 quantization and tool_choice verification.
- Retain deepseek-v4.1-flash (0910), z-ai/glm-5.3-flash, and qwen3.8-flash in the automated fallback chain.
- Update ADR 0002 with 1017 economics (30% price reduction on prompt/cache, +60% intelligence benchmark increase) and a 7-point provider qualification playbook.
- Add operational scripts and tooling for session compaction, subagent vector deduplication, gateway preflight, and triage diagnostics in k8s/openclaw.
- Update DuckDB backend engine, git-sync logic, and test suites.
- Enhance Mila tracking UI components and add container build configuration.
- Sync Terraform infrastructure state for Authentik.

k8s/openclaw/crons.yaml

@@ -34,7 +34,7 @@ jobs:
       expr: "30 3 * * *"
       tz: "Europe/Berlin"
     agent: "fitness"
-    model: "openrouter/deepseek/deepseek-v4.1-flash"
+    model: "openrouter/deepseek/deepseek-v4.1-flash-1017"
     session: "isolated"
     channel: "telegram"
     to: "-1004326921510"
@@ -58,7 +58,7 @@ jobs:
       expr: "0 3 * * 0"
       tz: "Europe/Berlin"
     agent: "itguy"
-    model: "openrouter/deepseek/deepseek-v4.1-flash"
+    model: "openrouter/deepseek/deepseek-v4.1-flash-1017"
     session: "isolated"
     channel: "telegram"
     to: "-1004326921510"
@@ -83,7 +83,7 @@ jobs:
       expr: "30 6 * * 5"
       tz: "Europe/Berlin"
     agent: "recherche"
-    model: "openrouter/deepseek/deepseek-v4.1-flash"
+    model: "openrouter/deepseek/deepseek-v4.1-flash-1017"
     session: "isolated"
     channel: "telegram"
     to: "-1004326921510"