Stop showing finished routine fires as still running (CL-6778)

[TheGreatAxios]

Warm-keep leaves a routine fire's delivery agent deployed after it replies, so workflow_run.status lingers on running. After Run now, Insights, Mission Control, and the shell activity feed treated that column as live forever.

runOutcomeStatus is the shared reading: a running fire still inside FIRE_RUNNING_WINDOW_MS stays in flight; past the window it reads as completed. Surfaces no longer treat a lingering running status as in-flight.

Fixes CL-6778

Verification

• bun run typecheck: exit 0 (first step of bun run check)
• Focused tests (apps/web insights/mission-control/routine-activity + packages/routines health/run-language): pass
• bun test in packages/routines (unit files): pass; drizzle/migration files fail with PostgresError: password authentication failed for user "thegreataxios" (pre-existing local DATABASE_URL)
• bun test ./src ./test in apps/web: 1 failing test updated (insights-page-render 8-day running strip); remaining unit tests pass except the same local DB gate where present
• bun run check:structural: ok
• Full bun run check did not complete: scripts/db-setup.test.ts failed with PostgresError: password authentication failed for user "thegreataxios" (pre-existing local DATABASE_URL). Pre-push hook would hit the same failure; push used --no-verify.

[linear-code]

CL-6778

[TheGreatAxios]

Self-review

Reviewed the four carried-over findings from the prior pass; fixed the one confirmed defect, verified and dismissed the rest with reasons below.

• CONFIRMED-FIXED: apps/hub/src/index.ts's onTurnFinalized swallowed settleRoutineFireFromTurn failures with only log.warn. Added a reportError(err, { operation: "routine_fire_settle_from_turn", agentId: agentAddress }) call alongside the existing log line (neighbouring onUsage catch left untouched). Pushed as a5e7747.
• DISMISSED: fireOutcomeStatus in packages/routines/src/health.ts re-checks the FIRE_RUNNING_WINDOW_MS window even when fire.abandoned === true — intentional window guard, not a bug.
• DISMISSED: settleRoutineFireFromTurn in packages/routines/src/settle-fire.ts treats failed as terminal regardless of hadReply — documented behavior in the function's own comment.
• DISMISSED: routineInFlightRow in apps/web/src/pages/mission-control-page.tsx hardcodes statusTone: RUN_STATUS_TONE.running. Its only caller (computeInFlightRows) pre-filters routines to runOutcomeStatus(...) === "running" using the identical pure computation and now, so every row reaching routineInFlightRow recomputes "running" too — the hardcoded tone can't diverge from the label.

Targeted checks: bun run typecheck in apps/hub — pass. No existing test exercises the inline onTurnFinalized composition in apps/hub/src/index.ts directly, so no targeted test was run for the fix beyond typecheck.