Model & cost admin

Routing policy: deterministic first → cheap model → reasoning model → premium escalation (optional). Every call is logged.