fix(fireworks): route Fireworks models through resolveModel everywhere

pi-ai's getModel/getModels does not know about the Fireworks providers
(fireworks, fireworks-firepass); both live under our local model-resolver
because Fireworks speaks the Anthropic-compat endpoint with Bearer auth
at https://api.fireworks.ai/inference, not pi-ai's built-in catalog.

Three call sites were still hitting pi-ai directly and failing silently
for Fireworks:

1. connector-model-policy.ts — listProviderModels() caught the pi-ai
   throw and returned []. The "Fire Pass (CEO runtime)" card in the
   Team Models onboarding step therefore showed "暂无模型 / 已启用 0/0",
   blocking users on Fire Pass from continuing onboarding.

2. worker/worker-runner.ts — getModel() threw mid-run when the selected
   connector was Fireworks, so the worker could never actually execute
   an agent turn against Fire Pass or the curated Fireworks model set.
   Now uses resolveModel() + the Fireworks-specific Bearer header from
   resolveExtraStreamHeaders() so streamSimple hits the correct endpoint
   with the correct auth.

3. agent-runtime/cost-writer.ts — cost observation silently wrote
   amount_usd=null for Fireworks runs because getModel() threw inside
   the try/catch. Now resolves via resolveModel() so the Fireworks
   curated contextWindow/maxTokens are visible to calculateCost().

Verification: pnpm typecheck 0 / pnpm lint 0-0 / pnpm build:verify 0-0
/ pnpm test:unit 508/508.

src/main/connector-model-policy.ts

@@ -1,6 +1,6 @@
-import { getModels } from "@mariozechner/pi-ai";
 import type { ConnectorId } from "@shared/types";
 import { getConnectorDefinition } from "./connectors";
+import { resolveModels } from "./model-resolver";
 
 interface ConnectorModelPolicyDeps {
   getConnector: (id: ConnectorId) => { id: ConnectorId; label?: string | null; model: string | null };
@@ -26,13 +26,15 @@ function uniqueModels(models: Array<{ id: string; label: string }>) {
   return Array.from(byId.values());
 }
 
+/**
+ * Returns the models available for a given pi-ai provider id, going through
+ * `resolveModels` so that providers not in pi-ai's built-in catalog (currently
+ * the two Fireworks connectors, which serve `accounts/fireworks/routers/...`
+ * and curated `accounts/fireworks/models/...` ids) are represented in the UI
+ * model picker instead of collapsing to an empty list.
+ */
 function listProviderModels(provider: string): Array<{ id: string; label: string }> {
-  try {
-    const models = getModels(provider as never);
-    return models.map((model) => ({ id: model.id, label: model.name ?? model.id }));
-  } catch {
-    return [];
-  }
+  return resolveModels(provider).map((model) => ({ id: model.id, label: model.name }));
 }
 
 export function getConnectorModelPolicy(