show cloud verdicts in test models and make ci forgiving

isolated test ring is scanned for non local outcomes so results read
like cloud 403 then local agent, live upstream suites run continue on
error so server side gating never falsely reddens code prs, ring logs
upload as artifacts, manual dispatch enabled.