Restore the provider architecture gatekeeper on this branch

`cross provider case clusters are derived or specifically justified` passes on
main and failed on this branch. The allowlist pins each guarded construct to an
exact line with a text anchor, and earlier commits here inserted lines into
UsageStore+Refresh.swift, UsageStore.swift and MenuCardView+ModelHelpers.swift,
so 44 entries drifted off their anchors and every orphaned entry then cascaded
into an unjustified-construct failure.

- Recompute the 44 drifted line numbers against their anchors.
- Justify the two Claude constructs in the composition file, which were added
  with no marker at all. The first reads better hoisted into a named local than
  as a comment buried in an argument list.
- Update the MenuCardView cluster fingerprint: the statusLine note sits between
  the .kiro and .kilo checks, so the gatekeeper now sees one three-provider
  cluster where the entry expected two. The maintainer's reason text still
  describes it accurately and is left alone.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: luisgonzaleznf

Sources/CodexBar/UsageStore+ClaudeStatusLineComposition.swift

@@ -12,10 +12,13 @@ extension UsageStore {
         _ result: ProviderFetchResult,
         _ context: ProviderRefreshOutcomeContext) -> UsageSnapshot?
     {
+        // Provider-specific by design: the statusLine feed is a Claude-only source, so every other provider
+        // must reach the composition helper with no source label and pass straight through it.
+        let claudeSourceLabel = provider == .claude ? result.sourceLabel : nil
         guard let composed = Self.claudeSnapshotComposingStatusLineFeed(
             current: scoped,
             previous: self.snapshots[provider.instanceID],
-            sourceLabel: provider == .claude ? result.sourceLabel : nil,
+            sourceLabel: claudeSourceLabel,
             accountIsStable: context.claudeOAuthActiveAccountObservation != .changed,
             ownsPreviousRows: self.claudeStatusLineOwnsPreviousRows())
         else { return nil }
@@ -71,6 +74,8 @@ extension UsageStore {
     /// Records the account behind a stored Claude snapshot. The feed carries no identity, so a snapshot it
     /// produced must not become the ownership evidence for the next one.
     func recordClaudeSnapshotAccount(provider: UsageProvider, sourceLabel: String?) {
+        // Provider-specific by design: only Claude has a statusLine feed whose identity-free snapshots must be
+        // excluded from becoming the ownership evidence for the next composition.
         guard provider == .claude, !Self.isClaudeStatusLineSourceLabel(sourceLabel) else { return }
         self.claudeSnapshotAccountUuid = ClaudeAccountProfile.accountUuid(
             environment: ProcessInfo.processInfo.environment)