test: pin model routes in webhook and Cordis fixtures

apps/cli/tests/fixtures/github-webhook/cordis.yml

@@ -1,6 +1,12 @@
 # Real-product test overlay: the CLI, provider, Web servers, webhook runtime,
 # adapter, rule, Workspace, Session, and Agent all remain production modules.
 
+# Webhook delivery uses the same live model as the other real-API smokes.
+- id: agent-default-model
+  config:
+    provider: deepseek-official
+    model: deepseek-v4-flash
+
 - insert:
     - id: webhook-runtime
       name: '@deepseek-ai/dsh-webhook'

apps/web/tests/cordis-tool-round.e2e.ts

@@ -75,6 +75,7 @@ describe('web e2e: Cordis tools use their owned cards', () => {
   beforeAll(async () => {
     scaffold = await launchWebScaffold({
       cordisTools: true,
+      extraOverlayPath: fileURLToPath(new URL('./cordis-tool-round.overlay.yml', import.meta.url)),
       compareReplaySession: true,
       ...(MODE === 'record' ? {} : { replayFixture: FIXTURE, paceMs: 15 }),
     })

apps/web/tests/cordis-tool-round.overlay.yml

@@ -0,0 +1,5 @@
+# Keep the recorded Cordis lifecycle on its original model route.
+- id: agent-default-model
+  config:
+    provider: deepseek-official
+    model: deepseek-v4-flash