Add provider_request_rejected as the cloud BadRequest classification for managed providers and register it across runtime, cogitate, brain state, readiness, chat, stats, and backlog copy surfaces. Introduce PROVIDER_ERROR_TEXT_CAP_CHARS as the lane-neutral provider error text bound, replace the local endpoint cap constant, and apply the bound to the cloud OpenHands error event path.