fix(ypp): refresh 403'd on every real call — drop the auditDetails part (needs a partner scope)

Creator: 'when I attempt to refresh my YPP page, I get an error about not being
able to reach YouTube. Seriously?' Real log: channels.list failed (403) x3.

Root cause #1 (the 403): channels.list?mine=true&part=statistics,auditDetails,
contentDetails returns 403 insufficientPermissions when the token lacks the
youtubepartner-channel-audit scope — which the auditDetails part ALONE requires,
per the docs ('A request that retrieves the auditDetails part ... must provide an
authorization token that contains the youtubepartner-channel-audit scope'). That
scope is MCN partner tooling with a 2-week token-revocation rule; the app must not
hold it. TASK-39's 'current scopes suffice, no re-consent' slice-1 claim was wrong
for this part; mock-fake tests never touched the real API, so it shipped green and
403'd every refresh since 2026-09-22.
https://developers.google.com/youtube/v3/docs/channels/list

Fix: part=statistics,contentDetails only; standing flags removed from
ChannelStatsService -> YppStatSnapshot surface -> YppTrackerViewModel -> drawer,
replaced by an honest deep-link row ('Channel standing isn't exposed to YouTube
apps — check the Earn page'). YppSnapshot standing columns stay (schema-stable,
always false). channels.list failures now log the response BODY — the bare code
could not name insufficientPermissions, which is what made this undiagnosable.

Root cause #2 (found by the new Good Dog, masked by the 403): statistics come back
as JSON STRINGS ('350'); raw GetInt64() throws. Tolerant ReadInt64 (ValueKind-first;
JsonElement.TryGetInt64 THROWS on strings — type-in, not try-type).

Good Dog: ChannelStatsServiceTests.CaptureCurrent_RequestsNoAuditDetails_AndStillParsesTheSnapshot
(URL asserts no auditDetails + snapshot parses); YppPullOutTests fixture updated.
Recipes for both 403/scope and statistics-strings entered in MyMistakes.md.

Also shipped in the same commit (shared PreviewPane.xaml + ai.md): the audio-sync
status dot removal from the #77 feedback round (creator: 'what is the point of the
status light? Lose it') — IntToSyncBrushConverter deleted with it.

verify.sh gate: 0 warnings, 316/316 pass, scope-check clean.

ai.md

@@ -723,8 +723,9 @@ devices, no timers).
   the first `|N|` ms of the live stream head (see `AudioMixer.StartLive`; the delay line stays
   clamped 0..500 internally — negative bypasses it entirely). The advance is armed once at `StartLive`
   (eating the head mid-stream is impossible); positive is live-reactive (re-read per tick). A slider
-  on the mic bar (`"AUDIO SYNC"`, locked while live/recording via `IsEditMode`) + a status dot
-  (`IntToSyncBrushConverter`) surface it. Changing the delay flushes the line (a live change clicks
+  on the mic bar (`"AUDIO SYNC"`, locked while live/recording via `IsEditMode`) surfaces it
+  (a one-time status dot next to it was removed 2026-09-23 per creator feedback — the slider +
+  numeric tooltip carry the state). Changing the delay flushes the line (a live change clicks
   rather than smears).
 - **TRAX — free background music (TASK 8):** `MusicPlayer` = NAudio `MediaFoundationReader`
   (mp3/wav/m4a) → `VolumeWaveProvider16` at the hardcoded **0.20** bed (no slider) → `WaveOutEvent` on
@@ -1447,9 +1448,15 @@ removal above). It has three layers, all free — this is the product's differen
 - **Journey tracker (TASK 39, slice 1 shipped 2026-09-22).** A **"YPP"** tab below the
   Stream Settings pull-out (Live screen right edge) shows the connected creator's position
   toward each YPP tier threshold. Slice 1 = current-scope data only: `channels.list?mine=true
-  &part=statistics,auditDetails,contentDetails` (subs/views/videos + uploads-playlist id +
-  live standing flags) + `playlistItems.list` for 90-day public uploads. Every refresh appends
+  &part=statistics,contentDetails` (subs/views/videos + uploads-playlist id) +
+  `playlistItems.list` for 90-day public uploads. Every refresh appends
   a `YppSnapshot` to SQLite (schema v10) — the history a later slice needs for velocity/ETA.
+  **The `auditDetails` part is OUT (fixed 2026-09-23):** readding it 403s the WHOLE request —
+  that part alone requires the `youtubepartner-channel-audit` scope no app for normal creators
+  should request (the standing flags sat unreadable since slice 1 shipped; the app's `youtube` +
+  `youtube.force-ssl` scopes were never sufficient for them — the "no re-consent" slice-1 claim
+  was wrong for that part). Channel standing now deep-links to the Earn page; API stats come from
+  `statistics,contentDetails` only. YPP/API failures log the response body's `error.reason`.
   **YPP thresholds are versioned, date-aware DATA, never constants** — the Tier-2 bar doubles
   for new applicants on **2027-02-01** (long-form 4,000 → 8,000 qualified hrs / 365d; Shorts
   10M → 20M / 90d), while the Tier-1 fan-funding bar (500 subs / 3,000 hrs / 3M Shorts) is
@@ -1457,8 +1464,9 @@ removal above). It has three layers, all free — this is the product's differen
   velocity / ETA are **slice 2**: Analytics-API scopes (`yt-analytics.readonly`, additive
   `yt-analytics-monetary.readonly`) behind the `IChannelStatsProvider` seam (additive
   capability, requires an OAuth re-consent). Compliance items no API exposes (2FA, AdSense
-  linkage) are in-app self-reported checkboxes with deep links; standing checks are live from
-  `auditDetails`. Slice 2's once-daily refresh gate + snapshot history were baked into slice 1.
+  linkage) are in-app self-reported checkboxes with deep links; channel standing (exposed only
+  via the partner-audit scope) deep-links to the Earn page. Slice 2's once-daily refresh gate +
+  snapshot history were baked into slice 1.
 
 **What was rejected:** always-on watermark (obscurable — replaced by the flash), hard stream-time
 cutoffs (the worst dead end — a stream dying mid-broadcast reads as broken, and YouTube streams