feat: add ChatGPT reset cards

[Longtianmu]

Summary

• expose available ChatGPT/Codex rate-limit reset credits through the provider and control-plane gateway
• render eligible reset cards in the Floway upstream account UI
• require a second confirmation before redemption, use a stable idempotency key, and clear quota/card/credit UI after success

Ablation and verification

• focused provider, gateway, and WebUI tests: 5 files / 138 tests passed
• localization tests: 3 files / 16 tests passed
• mock-upstream browser flow: cancel sent 0 consume requests; confirm sent exactly 1 with an idempotency key; success removed the consumed card and stale quota/credit state
• LF snapshot: type generation, lint, every workspace typecheck, repository inventory/generated/parity checks, and the production Web build passed
• full Vitest: 5714 / 5732 passed locally; the 18 failures are Windows-only boundaries outside this diff (17 SQLite cleanup EBUSY failures and 1 Windows ESM path failure)
• installer harness is Unix-specific and cannot run locally because it invokes /bin/sh; the target CI runs Ubuntu/Node 22
• final diff audit: 19 scoped files only; no AGENTS.md, CHANGELOG.md, root manifest, or lockfile changes; git diff --check passed