Omit hook inputs from traces by default; set a TracePolicy to override.

Revalidate live mode, then immediately run stock approval routing.

Warn and fail closed if driven synchronously.

This middleware exists to read the live mode from an async Store. A synchronous run never resolves an autonomous mode (the sync Store read is rejected on the event loop and fails closed to Manual), so surface it loudly rather than letting a wiring change silently over-gate.