fix: WorkBuddy Global catalogs, first-token logs, and account cards

[caigee-cmd]

Summary

• Fetch WorkBuddy Global model catalogs from /v2/enterprises/personal/models instead of the console OIDC page, and return catalog failures as 503 JSON.
• After dropping caller system prompts, still send WorkBuddy an empty leading system message so Global does not reject with 11128.
• Show first-token time on Logs, label token counts as input/output, add account edit, and keep cards mounted on refresh so quota/runtime meters can animate.

Test plan

• go test ./internal/providers/workbuddy ./internal/api ./internal/executor ./internal/translate
• frontend typecheck + npm run sync
• Open a WorkBuddy Global account catalog in the console
• Stream a chat and confirm Logs shows first-token time plus in/out token labels
• Refresh Accounts and confirm quota/runtime meters tween without swapping to skeletons