feat(llm): default todo2code to SubLLM Z.AI GLM 5.3

[tom-sapletta-com]

Summary

• enable public subactor/subllm routing by default
• select direct Z.AI glm-5.3 through the central policy
• require explicit T2C_USE_SUBLLM=false for legacy OpenRouter compatibility

Verification

• npm run verify
• 430 tests: 429 passed, 1 skipped, 0 failed

Ticket: ticket-089

[ifuri-validator-agent]

Deterministic Validator approval for exact head 295e03ac4ffdedd44457ec9680c570382f85c168.

Ticket: ticket-089
Correlation ID: todo2code-pr-104-ticket-089-295e03ac4f
Model: zai/glm-5.3
Reviewed diff chunks: 2
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 2 diff chunk(s). SubLLM routing becomes the default with explicit T2C_USE_SUBLLM=false opt-out; test script pinned hermetically to the legacy route. Changes are small and consistent with stated intent; governance artifacts are documentation only. No failed checks in test results. | Test chunk updates fixtures to glm-5.3, adjusts the new default-on SubLLM routing (T2C_USE_SUBLLM env gating), and adds a focused test for default SubLLM with legacy OpenRouter opt-out. CLI test sets T2C_USE_SUBLLM=false for deterministic-mode isolation. Verification reports all tests passing.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-089-0719
TICKET ticket-089
HEAD_SHA 295e03ac4ffdedd44457ec9680c570382f85c168
CORRELATION_ID todo2code-pr-104-ticket-089-295e03ac4f
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["Live OpenRouter contract (opt-in)=SKIPPING","governance=SKIPPING","Java adapter (JDK 17 required)=PASS","verify=PASS","koru / code-review=PASS","Java adapter (JDK 17 required)=PASS","verify=PASS"]
INPUT required_checks = ["verify","Java adapter (JDK 17 required)","koru / code-review"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"

[tom-sapletta-com]

Superseded by #108 after ticket-090 was independently merged in #107. The replacement preserves ticket-089 with plan-first history and one workstream.