fix(runtime,plugin-approvals,metadata-protocol): the last four readers of the automation and publish codes

Four more consumers of codes batch 2 renamed, found by running the full suite
rather than grepping harder:

- plugin-approvals asserts the resume refusal code (its approval node IS the
  service-gated case), a package the sweep never touched.
- http-dispatcher.test mocks the automation service's result, so its two
  literals are the emitter's contract restated in a mock.
- batch_aborted -> BATCH_ABORTED: it rides in the same failed[] array as the
  causal item's catalog code, so leaving it lowercase made one array carry two
  vocabularies.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MaSQn77TT5fUgHK9CesaDK

Author: claude

content/docs/references/api/analytics.mdx

@@ -140,6 +140,7 @@ const result = ErrorCode.parse(data);
 * `AUTH_CONFIG_ERROR`
 * `AUTH_REQUIRED`
 * `AUTOMATION_UNSCOPED_RUN_DATA_ACCESS`
+* `BATCH_ABORTED`
 * `BATCH_NOT_ATOMIC`
 * `BATCH_TOO_LARGE`
 * `BATCH_UNRESOLVED_REF`