Circuit breakers on an owned backend: fail fast when the AI vendor fails

When a downstream AI or vendor HTTP dependency starts failing, the owned API should stop waiting on it. A circuit breaker opens after a measured run of failures and returns a cached, stale, or degrade