fix: detect org-access-denied errors, suppress chat output, and rotate Claude tokens

When a Claude account is suspended, the API returns "Your organization does
not have access to Claude" on the success path or "Failed to authenticate.
API Error: 403 terminated" on the error path. Both are now classified as
'org-access-denied', suppressed from Discord output, and trigger automatic
token rotation. If all tokens are exhausted, enters cooldown without Kimi
fallback (same as usage-exhausted and auth-expired).

Changes:
- agent-error-detection: add isClaudeOrgAccessDeniedMessage(), expand
  classifyClaudeAuthError() and shouldRotateClaudeToken()
- streamed-output-evaluator: detect org-access-denied in success-path chain
- provider-fallback: add NO_FALLBACK_COOLDOWN_REASONS set and
  isPrimaryNoFallbackCooldownActive() helper
- provider-retry: handle org-access-denied in rotation loop
- message-agent-executor / task-scheduler: use generalized no-fallback
  cooldown check
- Tests: +8 test cases across 5 test files (415 total passing)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/message-agent-executor.ts

@@ -20,7 +20,7 @@ import {
   getFallbackProviderName,
   hasGroupProviderOverride,
   isFallbackEnabled,
-  isUsageExhausted,
+  isPrimaryNoFallbackCooldownActive,
   markPrimaryCooldown,
 } from './provider-fallback.js';
 import { runClaudeRotationLoop } from './provider-retry.js';
@@ -508,11 +508,11 @@ export async function runAgentForGroup(
 
   const provider = canFallback ? await getActiveProvider() : 'claude';
 
-  // Already in usage-exhausted cooldown — log only, no response
-  if (provider !== 'claude' && isUsageExhausted()) {
+  // Already in no-fallback Claude cooldown — log only, no response
+  if (provider !== 'claude' && isPrimaryNoFallbackCooldownActive()) {
     logger.info(
       { chatJid, group: group.name, runId, provider },
-      'Claude usage exhausted (cooldown active), silently skipping',
+      'Claude primary cooldown active, silently skipping',
     );
     return 'error';
   }