fix(automation): harden announce delivery + cron coding profile (#25813 #25821 #25822)

Co-authored-by: Shawn <shenghuikevin@shenghuideMac-mini.local>
Co-authored-by: 不做了睡大觉 <user@example.com>
Co-authored-by: Marcus Widing <widing.marcus@gmail.com>

src/gateway/tools-invoke-http.cron-regression.test.ts

@@ -120,4 +120,23 @@ describe("tools invoke HTTP denylist", () => {
 
     expect(cronRes.status).toBe(200);
   });
+
+  it("keeps cron available under coding profile without exposing gateway", async () => {
+    cfg = {
+      tools: {
+        profile: "coding",
+      },
+      gateway: {
+        tools: {
+          allow: ["cron"],
+        },
+      },
+    };
+
+    const cronRes = await invoke("cron");
+    const gatewayRes = await invoke("gateway");
+
+    expect(cronRes.status).toBe(200);
+    expect(gatewayRes.status).toBe(404);
+  });
 });