Remediate ClickPipes and organization OpenAPI drift

[sdairs]

The live Cloud OpenAPI document exposed fields the Rust library dropped or could not send: organization snapshot eligibility, Kinesis AWS Glue schema registries, and Kafka tombstone handling. Refresh the snapshot and model all nine drift findings.

• Add optional organization capabilities and typed Kafka tombstone modes.
• Add strict Kinesis Glue registry requests, tolerant responses, and a fallible response-to-request conversion that reports missing required wire fields.
• Cover serialization, null/missing fields, unknown enum values, write-back, and client requests/responses; update the library migration notes and CI path mappings and fixtures.

Existing CLI builders leave the new request options unset. This PR adds library support; CLI flags can follow separately.

Fixes #997.

Linked with gh stack link 1019 1022 into native stack #1019, directly above #1021 (codex/bump-is-ai-agent-0.6.0).

Validation:

• Fresh live-spec dry run: 0 actionable drift, with the existing 3 acknowledged enum constraints unchanged.
• API/analyzer tests: 705 passed, 26 live/environment-dependent tests ignored.
• cargo fmt --all; API/analyzer Clippy; both CLI Clippy configurations; telemetry-disabled check; workspace all-features check: passed.
• Python suite: 95 passed.
• Local CLI tests: 2,034 passed, 5 ignored, 1 environment-dependent failure. config_and_argument_failures_carry_their_full_human_detail_in_json also fails in isolation because an existing local ClickHouse uses ports 8123/9000 and adds a port-selection notice. Its test and server implementation are unchanged by this PR. Remaining test binaries passed.

The complete CLI CI workflow passed on a clean runner, including all CLI tests and the install path mapping check. All four install platforms also pass. The API-library CI workflow and combined Unit Tests job also pass. The current-head Cloud integration run remains queued; it was requested with run-cloud-integration.

[iskakaushik]

LGTM