UpstreamUnavailable when QA_API binding is missing

Pin the QA platform wire contracts: behaviour search uses MATCH without D1-hostile bm25(); suite dispatch plans one proof set at a time and audits dispatch requests; the CircleCI pipeline params only emit only_job + bypass_fast and the allowlist forbids legacy synthetic qa.* names; reconciliation polls workflows/jobs and writes workflow_runs/workflow_jobs; ingest produces a stable workflow_id and chunks D1 batches to ≤90 statements with INSERT OR REPLACE idempotency; the tests catalog search + facets and Investigate change-selection seed paths are pre-AI; and the qa-mcp worker forwards 1:1 to the same REST surface inside the outer admin boundary with the documented upstream-failure mapping.