feat: Phase 2 - reliability & observability

- Circuit breaker: proper thresholds (3 failures, 30s timeout)
- HTTP timeouts: 30s on all providers (was no timeout)
- Structured logging: slog replaces fmt.Printf throughout
- Stream errors: propagated as SSE error events to client
- Registry fetch: retry with backoff (3 attempts)
- Registry reads in dashboard protected by RWMutex

internal/providers/deepseek.go

@@ -3,6 +3,7 @@ package providers
 import (
 	"bufio"
 	"context"
+	"time"
 	"encoding/json"
 	"fmt"
 	"io"
@@ -21,7 +22,7 @@ type DeepSeekProvider struct {
 
 func NewDeepSeekProvider(cfg config.DeepSeekConfig, apiKey string) *DeepSeekProvider {
 	return &DeepSeekProvider{
-		client: resty.New(),
+		client: resty.New().SetTimeout(30 * time.Second),
 		config: cfg,
 		apiKey: apiKey,
 	}