feat(i8-i9): webhook DEAD replay, read-only delivery status, and callback UI

I8: platform proxies replay to webhook; webhook ops token filter and internal
replay endpoint; delivery service supports read/replay flows.

I9: platform GET callback webhook delivery status by inbox id; UI shows
read-only status block and handles load errors without blocking the page.

Also refresh OpenAPI, Runbook notes, test fixtures and YAML; fix Vite dev
axios baseURL so /api uses proxy; improve login error messaging.

Made-with: Cursor

services/RUNBOOK.md

@@ -144,3 +144,7 @@ curl -sS -o /dev/null -w "%{http_code}\n" \
 | `craftlabs.platform.delivery.batch-size` | 每 tick 最多拉取条数 |
 
 比特 Callback **2xx** 在收据落库与 **出站行入队** 之后返回；真正 `POST` 平台由后台线程执行。`DEAD` 行需人工依据 `last_error` 与平台侧幂等处理。
+
+**I8 — DEAD 重放入队**：在平台与 Webhook 配置 **`LICENSE_WEBHOOK_BASE_URL`**（Webhook 根 URL）与 **`LICENSE_WEBHOOK_OPS_TOKEN`**（两侧相同；保护 Webhook `POST /internal/v1/platform-deliveries/by-receipt/{receiptId}/replay`）。**OPS / SYS_ADMIN** 可在 UI **Callback 详情** 触发「重新入队出库」，平台会按收件箱的 `webhookReceiptId` 代调 Webhook；仅当出库行为 **`DEAD`** 时成功。亦可手工：`curl -X POST -H "X-Webhook-Ops-Token: …" "http://<webhook>/internal/v1/platform-deliveries/by-receipt/<receiptId>/replay"`。
+
+**I9 — 出库状态只读**：平台 `GET /api/v1/callback-inbox/{id}/webhook-delivery` 代调 Webhook `GET …/by-receipt/{receiptId}`（同一 Ops Token）；UI 详情展示 `status` / `attempts` / `lastError` 等。