#1049 #1041 follow-ups: live checkers probe removed routes; orphaned permissions; per-key breaker reset /tmp flag; drop api_tokens table

EARS SPEC: - scripts/verify_* live checkers (#911, #1014, #1020, #1025, #1028, #1032, api_input) shall probe only routes that exist after #1041; a removed route shall be checked for 404/405, not for its old behaviour. - The RBAC catalogue shall not offer permissions that guard no route (view_analytics, manage_schemas) unless a route uses them. - POST /api/v1/circuit-breakers/<key>/reset shall reset the breaker state that the engine reads, or be removed; it shall not write a /tmp flag nothing reads. - A migretti migration shall drop highway.api_tokens once no code reads it (tenant delete still lists it), with a down that recreates the empty table. - The engine submodule's uncalled circuit-breaker cache-reset test helper shall be removed. Found by the #1041 agent 2026-10-22.