fix: detect org-access-denied errors, suppress chat output, and rotate Claude tokens

When a Claude account is suspended, the API returns "Your organization does
not have access to Claude" on the success path or "Failed to authenticate.
API Error: 403 terminated" on the error path. Both are now classified as
'org-access-denied', suppressed from Discord output, and trigger automatic
token rotation. If all tokens are exhausted, enters cooldown without Kimi
fallback (same as usage-exhausted and auth-expired).

Changes:
- agent-error-detection: add isClaudeOrgAccessDeniedMessage(), expand
  classifyClaudeAuthError() and shouldRotateClaudeToken()
- streamed-output-evaluator: detect org-access-denied in success-path chain
- provider-fallback: add NO_FALLBACK_COOLDOWN_REASONS set and
  isPrimaryNoFallbackCooldownActive() helper
- provider-retry: handle org-access-denied in rotation loop
- message-agent-executor / task-scheduler: use generalized no-fallback
  cooldown check
- Tests: +8 test cases across 5 test files (415 total passing)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/task-scheduler.ts

@@ -39,7 +39,7 @@ import {
   getFallbackProviderName,
   hasGroupProviderOverride,
   isFallbackEnabled,
-  isUsageExhausted,
+  isPrimaryNoFallbackCooldownActive,
   markPrimaryCooldown,
 } from './provider-fallback.js';
 import { runClaudeRotationLoop } from './provider-retry.js';
@@ -560,13 +560,17 @@ async function runTask(
           ? await getActiveProvider()
           : 'claude';
 
-    // Already in usage-exhausted cooldown — skip task instead of running on Kimi
-    if (isClaudeAgent && provider !== 'claude' && isUsageExhausted()) {
+    // Already in no-fallback Claude cooldown — skip task instead of running on Kimi
+    if (
+      isClaudeAgent &&
+      provider !== 'claude' &&
+      isPrimaryNoFallbackCooldownActive()
+    ) {
       logger.info(
         { taskId: task.id, group: context.group.name, provider },
-        'Claude usage exhausted (cooldown active), skipping scheduled task',
+        'Claude primary cooldown active, skipping scheduled task',
       );
-      error = 'Claude usage exhausted';
+      error = 'Claude primary cooldown active';
       // Fall through to task completion handling below
     } else {
       const attempt = await runTaskAttempt(provider);