Verify post-deploy regression detection live with CloudWatch

## Gap Epic 12247 done-means: "A post-deploy error-rate breach against the previous release files a task with the delta in its body." Code and tests deliver it (`apps/api/app/production_qa/regression.py:202-223`, body at `templates.py:116-139`; `apps/api/tests/test_production_qa_regression.py:335-355` asserts "Baseline: 1.00%", "After deploy: 6.00%", "Delta: +5.00 pts (+500%)"). The live oracle never ran: the operator chose "I'll grant CloudWatch read" (architecture R5) but no CloudWatch-read credential exists — `org/aws` (IAM user jaah-node-launcher) gets AccessDenied on `cloudwatch:ListMetrics`, and `credential_list` on 2026-11-01 shows no CloudWatch-read credential. ## Do 1. `credential_list`; look for a CloudWatch-read AWS credential (suggested name `org/aws-cloudwatch-qa`, GetMetricData/ListMetrics/PutMetricData on a sandbox namespace). Verify with `sts get-caller-identity` + `cloudwatch list-metrics`. If absent, ASK once with header `Credential`. 2. On dev (from a node that reaches https://dev.jaah.ai, console only, `org/console/dev-login`), on the `pqa-test` project with the gate ON: configure the CloudWatch metrics credential and metric names in Project › Production QA › Regression, publish a baseline then a breaching error-rate series in the sandbox namespace around a fresh `pqa-test` production deploy. ## Acceptance - One `regression` incident on `pqa-test` and one filed task whose body shows baseline, post-deploy value and delta (abs and %) — task link + Deployment › Metrics screenshot. - With revert policy set, the revert task is filed per policy; with it Off, none — observation. Out of scope: any code change (a defect found goes in its own task); Sentry/Datadog live pulls (no credential, fixture-tested); the Jaah project. Done means: - Both acceptance items observed on dev with evidence in the report, or the credential question answered "not granted" and the task settled naming that.

Proved against live CloudWatch that the regression pull, breach check and task body work (Delta +5.00 pts, +500%). Dev console part not observed: dev.jaah.ai is unreachable from this node and there's no CloudWatch-read credential. No code change.