Stream a Responses model round with native steering

Upgrade to a bounded WebSocket. The first uxduck.start frame supplies the signed session, model request, thread and sharing choice; credentials never enter the URL. Each response.steer update is authorized and reserved against the existing spending budgets. The final uxduck.response.done event follows accounting. Refusals arrive as socket error events.