fix: critical runtime fixes for fraud investigation demo

- Fix NameError: replace _config dict write with st.session_state write
- Fix streaming: use getattr(chunk, 'content', None) for safe chunk access
- Fix streaming: use list+join instead of string concat in hot loop
- Fix model IDs: use correct OpenRouter format (anthropic/claude-sonnet-4.6)