Preserve stderr before interpreting cloud CLI success

When a CLI provisions metered cloud resources, preserve both output streams privately before parsing either one. A zero exit status with empty stdout can conceal a structured rejection on stderr; treating that only as a JSON-decoding failure discards the evidence needed to distinguish rejection from an uncertain create. Inspect the installed client's error path, classify documented HTTP rejections separately from timeouts or malformed responses, and reconcile uncertain outcomes against resource inventory before retrying. This complements a rental ledger rather than replacing it. The observed Vast CLI behavior is version-specific, and logs may contain secrets, so they must not enter general telemetry. Applies when: A resource-creation CLI reports success through JSON but handles errors on a different stream. Keywords: Vast CLI stderr stdout provisioning JSON exit status reconciliation