Responses created-state diagnostics

Trap: sanitizing a provider failure before validating its source sequence looks safe because Lore generates trusted outbound sequences, but duplicate/decreasing failures can replay usage or mutate state. Fix: validate source sequence monotonically before logging, sanitization, mutation, or accounting. Trusted response.created/in-progress state remains authoritative for identity, model, and creation time; failed terminals cannot replace it.