fix(app): one variant expression serves both action shapes

The disabled arm carried its own destructive ternary whose destructive half
no test could reach — only cordon and drain carry a disabled reason and both
are default-intent — so the app package's 100% branch gate failed at 99.94%.
Hoisting the expression above the branch removes the unreachable half rather
than covering it with a test that asserts a state the config cannot produce.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>