Summary

• delegate Hawk model defaults, cost tiers, preferred tier models, and role defaults to Eyrie catalog policy helpers
• remove Hawk's direct lazy-provider constructor and add an audit guard against reintroducing lazy provider construction
• sync external/eyrie to the merged Eyrie model policy commit GrayCodeAI/eyrie@036043c

Validation

• golangci-lint run --timeout=5m ./internal/provider/routing ./internal/types ./internal/testaudit ./internal/engine ./internal/config ./cmd
• go test ./internal/provider/routing ./internal/types ./internal/testaudit -count=1
• go test ./internal/engine -count=1 -timeout=180s
• go test ./cmd -count=1 -timeout=180s
• go test ./internal/config -count=1 -timeout=180s
• GOTMPDIR=/private/tmp/hawk-go-tmp GOCACHE=/private/tmp/hawk-policy-compile-gocache go test ./... -run '^$' -count=1 -timeout=180s -p 2
• pre-push: boundary guards, govulncheck, go test ./..., go vet ./...