Prioritize blocking browser-cli doctor repairs

[freelw]

Summary

• keep the latest root and packaged Codex skill from main unchanged
• make doctor repair plans list blocking fail fixes before warn and skipped suggestions
• preserves the existing contract where missing credential setup starts with usable_status guidance even when the CLI executable is not on PATH

Validation

• .venv/bin/python -m pytest (514 passed)
• git diff --check