ci: schedule provider certification

[fallblu]

Summary

• schedule quota-aware Alpha Vantage, FRED, and ALFRED live certification behind environment secrets
• separate baseline, 150/min premium, and US market-data entitlement scopes
• redact provider failures, retain manual dispatch, and document credential setup and failure triage

Refs #137

Test plan

• make verify
• verify the provider-certification environment permits only develop and main
• verify the path-filtered registration run after merge
• manually dispatch live certification after both environment secrets are provisioned