Block unattended DashScope smokes by default and provide a zero-token
merge verification entry via run-goosed-v149-phase3-offline.mjs.
Co-authored-by: Cursor <cursoragent@cursor.com>
Prevent phase2/phase3/all reruns from burning DashScope tokens unless
GOOSE_V149_ALLOW_REAL_LLM=1 is explicitly set with human approval.
Co-authored-by: Cursor <cursoragent@cursor.com>