Close gaps: GLM-judge (anthropic registry) + run cancel + deep-link

#2 GLM judge (closes #114): registry NamedProvider gains a `format` field;
build_provider_registry builds an AnthropicProvider for format="anthropic".
GLM's coding/OpenAI endpoint is ToS-throttled for raw SDK, but its Anthropic
endpoint (api.z.ai/api/anthropic) accepts raw API calls (verified x-api-key
-> glm-4.7), so CLAWMATES_JUDGE_MODEL=glm:glm-4.7 routes the door governor /
topology judge through GLM with no runtime-routing. (Kimi-as-judge still needs
a Platform key — coding key is agent-only.)

#3 run-control: POST /api/topology-runs/{id}/cancel (workspace-scoped,
queued/running only); the worker honors it at the step boundary (checks
current_status in the checkpoint callback) and won't clobber a cancel with
`failed`. Frontend Run tab gains a Cancel button and clickable recent runs
that deep-link into a live/replayed stream (SSE replays from checkpoint).

cm-* tests (incl. new cancel test) + clippy + frontend lint/typecheck green.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

crates/cm-api/src/routes/topology.rs

@@ -275,6 +275,22 @@ pub async fn run_events_sse(
     Sse::new(stream).keep_alive(KeepAlive::default())
 }
 
+/// `POST /api/topology-runs/{id}/cancel` — request cancellation of a queued or
+/// running job; the worker stops at its next step boundary. 409 if the run is
+/// already terminal or unknown.
+pub async fn cancel_run(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+    Path(id): Path<Uuid>,
+) -> Result<StatusCode, ApiError> {
+    let cancelled = cm_db::repo::topology_runs::cancel(&state.pool, id, user.workspace_id).await?;
+    if cancelled {
+        Ok(StatusCode::OK)
+    } else {
+        Err(ApiError::Conflict)
+    }
+}
+
 /// `GET /api/topology-runs/{id}` — a single run with status + result.
 pub async fn get_run(
     State(state): State<AppState>,