fix(b-19): writer-env-fix uses PAT-implicit projectToken.project (replaces null-returning project(id))

[gHashTag]

B-19 — writer-env-fix.yml resolve_env returns null under PAT

Closes #160.
Cross-references #156 (B-17 misdiag).
Successor of #159 (B-18 Bearer→PAT, merged 07:47:19Z).

Root cause (R5-verified)

Dispatch run 25848523618 failed with jq: error (at <stdin>:1): Cannot iterate over null (null) at step resolve_env — the GraphQL response was {"data":{"project":null}}.

The query was:

query env($projectId: String!){ project(id:$projectId){ environments { ... } } }

Under a Project-Access-Token (PAT), Railway's project(id:$x) returns null when $x references a project the PAT does not control — and PATs are scoped to exactly one project (verified by token-classify.yml run 25846091578).

The previous IGLA_PROJECT_ID / ACC2_PROJECT_ID env vars (e4fe33bb / 12c508c7) referenced different projects than what TOKEN_ACC1 / TOKEN_ACC2 are bound to.

Fix (mirrors working sibling wave-a-massive.yml#L28)

Replace the explicit-id form with the PAT-implicit form:

{ projectToken { project { environments { ... } } } }

No $projectId variable, no id argument — the token's bound project is returned directly. This is the canonical pattern used by wave-a-massive.yml (last good run 25754312720 @ 2026-05-12 18:31Z).

Both resolve_env() and fetch_services() helpers are migrated.

Secondary fix — informational project IDs

For audit-trail clarity (the env vars now have no functional effect, since the query is PAT-implicit), the values are also corrected to match what each PAT actually controls:

Var	Old (BROKEN)	New (R5-verified by token-classify run 25846091578)
IGLA_PROJECT_ID	e4fe33bb-3b09-4842-9782-7d2dea1abc9b	f29aa9dd-ca0b-460f-ad24-c7680c6717fb (IGLA RACE, ACC1)
ACC2_PROJECT_ID	12c508c7-1196-468d-b06d-d8de8cb77e93	ad0f8f04-c56d-4b11-9350-cc0c2700b9db (IGLA, ACC2)

Acceptance

After merge:

1. gh workflow run writer-env-fix.yml --repo gHashTag/trios-railway -f confirm=PHI
2. Workflow should complete success (no exit 4, no exit 5).
3. R5 probe: SELECT EXTRACT(EPOCH FROM (NOW()-MAX(ts)))::int AS stale_sec FROM ssot.bpb_samples WHERE canon_name LIKE 'IGLA-SHORT-WAVE-MATRIX-%'; returns < 600 within T+10 min.

Anchor

φ² + φ⁻² = 3 · TRINITY · NEVER STOP · DOI 10.5281/zenodo.19227877