Use protected inventory for IBKR drills and reconciliation

[Pigbibi]

Purpose

Remove private deployment identities from active public examples and make daily drill and reconciliation target selection configuration driven.

Changes

• Daily drill summaries select any opted-in target from protected runtime inventory. Public Actions logs contain counts and outcomes only.
• Scheduler synchronization keeps the opted-in read-only precheck enabled while live execution and warmup remain gated; drill prechecks have no retry.
• Read-only reconciliation resolves production services from protected inventory while the public matrix carries profile names only.
• Public examples and test fixtures use synthetic account identifiers.

Safety and validation

• Existing live execution admission remains unchanged.
• A missing or invalid private inventory fails closed for reconciliation and produces no drill target notification.
• actionlint, ruff, JSON validation and private-inventory read-only previews completed locally; CI will run the repository checks.
• This removes identifiers from current source. Previously merged Git history and PR diffs require a separate repository history decision.