DeltaUnavailableReason network classification

Trap: classifying every incomplete published patch chain as malformed_chain looks correct because the chain cannot be used, but a manifest timeout, reset, or HTTP 5xx is transient and would trigger a false poisoned-publish alert. Fix: report malformed_chain only when fetched metadata is structurally invalid; report fetch failures as network, return null, and preserve full-download fallback.