Preserve stderr before interpreting cloud CLI success
When a CLI provisions metered cloud resources, preserve both output streams privately before parsing either one. A zero exit status with empty stdout can conceal a structured rejection on stderr; treating that only as a JSON-decoding failure discards the evidence needed to distin…