feat: connected storage in rb - #159

Adds src/lib/deliver.ts: --deliver flag parsing, delivery status
parsing off a job, per-delivery report lines, the delivery exit
code, and a bounded wait for pending deliveries to settle. Not
wired into any command yet, so nothing user-facing changes.

buildResult now parses the job's deliveries onto ProgressResult so a
later command can wait on them and report them. Empty when the job
named none. No command reads the field yet.

A rejected read no longer escapes waitForDeliveries and crashes the
command, since the job it's polling already completed. It keeps the
last known deliveries and tries again next interval, still bounded
by the deadline. An aborted signal still rethrows so Ctrl+C works.

Also documents the finishDeliveries test stub's `as never` and adds
coverage for a renamed delivery through parseDeliveries and
deliveryLine.

The API applies an org's default destination to every job and closes an
unstored result (HLS, multi-file, data-only) as not_deliverable, so a run
without --deliver could wait up to five minutes and exit 1 for a delivery
nobody asked for. finishDeliveries now takes a requested flag and returns
immediately when it is false, leaving the result exactly as the job read
at completion reported it so --json is unaffected. All three commands
pass requested: destinations.length > 0.

readDeliverFlags now parses --deliver=<uri> with the same validation and
de-duplication as the two-argument form. ffmpeg's own arg extraction drops
a --deliver=... token too, so it never reaches the ffmpeg command string.

By the time a command waits on deliveries the job has already completed,
so there is nothing left to cancel. Clearing jobId right before that wait
stops the SIGINT handler from posting a cancel for a job that already
finished. Ctrl+C still exits 130.

A 403 INSUFFICIENT_SCOPE is an authorization problem like a bad token, so
it now exits 2 instead of 1, via a small storageExitCode helper the same
tests can cover directly. The connection-shape comments now name the local
MCP server specifically, since the hosted one returns more fields. The
storage-page URL comes from getDashboardBaseUrl() instead of a hardcoded
string, and the missing-scope hint now names the September 13, 2026 cutoff
by explaining which credentials predate it. rb ffprobe no longer destructures
cred and baseUrl from openSession, since it never used either.