cc-watch hardening — resilience explorer

Pick a failure mode the daily cron can hit. See what the pipeline did before this PR (silent / unbounded) vs after (loud, accurate, bounded).

❌ Before

✅ After (this PR)