Fixing Provider Registry Mutations and Sandbox Permissions in git-with-intent

How a mutable global registry caused shared state corruption across tenants, and how Zod validation caught LLM response bugs that TypeScript types couldn't.