fix: refresh observed target lifecycle after Cloud Run sync

[Pigbibi]

Summary

• Refresh read-only lifecycle observations after Deploy Cloud Run completes, including failures.
• Use the existing exact service binding and region; do not infer a service from lists.
• Pin the shared observation publisher to merged QRT c2e46314.

Validation

• Focused workflow tests: 7 passed (regressions reproduced RED first).
• actionlint, ruff, git diff --check passed.
• Main push runs CI only; no deployment, Scheduler mutation, runtime or broker invocation.

Boundary

No deployment, runtime enablement, Scheduler/IAM changes, broker calls or manual workflow dispatch. Merge is held pending consumer rollout confirmation.