CI failure

Key features

• Watch — the ci_watch tool.
• CI failure, diagnosed before you even open the logs.
• tools — registers ci_watch / ci_diagnose on the real tool runtime.
• Starts a background job that polls for _new_ failed runs (the first poll sets a baseline, so historical red runs never fire the alarm)
• Streams status lines you can read any time