fix: parse nested Cloud Run deployment readback

[Pigbibi]

Root cause

The failed no-traffic run 33893273581 reported a revision readiness failure. A bounded read-only diagnosis found the revision ready and its immutable image matching the pushed digest. gcloud JSON projection retains the status envelope; treating that object as an array always returned False. The same error hashed effective traffic as an empty list. Array member projections also omitted protected configuration/IAM fields.

Minimal fix

• Read nested status.conditions and status.traffic in the existing inline workflow.
• Include container resources, secret references and IAM array members/conditions in the existing baseline comparison.
• Exercise the actual inline Python using synthetic fixtures; no new framework, dependency, hash or production module.

Verification

• Before fix: 4 failed, 9 passed.
• After fix: focused 13 passed; full local suite 343 passed, 1 existing dependency warning.
• Ruff, git diff --check, two shell blocks bash -n passed.
• No deploy, traffic/config/Scheduler/IAM change, credential refresh or broker call. Required CI remains the merge gate; runtime recovery is not claimed.

Runtime stop rule

Historical deployment validation remains parked. Any new one-shot no-traffic validation requires the independent bounded Goal; this PR does not dispatch it.