Function script_run 

pub async fn script_run(
    api: &dyn GatewayApi,
    config: &Config,
    profile_name: &str,
    project: &str,
    code: &str,
) -> Result<ScriptRunResult, CoreError>

ign script run — resolve the profile’s stored scriptExec secret, prove the route answers it, execute the code.

Resolution order is fixed: the secret gate FIRST (None → script_exec_not_configured, zero HTTP), then the version handshake, then exec. The config is the caller’s already-loaded view (main.rs resolves the profile for the client anyway; the TUI loads it inside the worker — the fire_webdev_status precedent).