Preserve model and access program pairs during compaction

[copyberry]

Preserve model and access program pairs during compaction

Why

Compaction using the previous model can inherit the current turn's access program, producing a model/program pair that the server rejects.

What changed

• Persist cyber_access_program in previous-turn settings and restore it during rollout reconstruction.
• Use the previous turn's access program when compacting with its model, preserving an absent program instead of inheriting the current selection.
• Pass the selected access program into local compaction prompts.

Testing

Add regression coverage for local and remote compaction after model switches, including resume, fork, rollback, and compaction checkpoints. Verify fallback and subsequent sampling use the current model/program pair, and API-key sessions do not inherit access-program authorization.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}