Wire the gateway's own State Hub reporting (GLAS-WP-0002-T03)

hub.py mirrors the two reins' hub.py under author: agt-glas-harness.
run_task_through_rein gains report_to_hub (default True), posting one
gateway_run progress event from a finally block -- fires on both
success and failure, giving the gateway an audit trail independent of
whatever the rein itself reports. cli.py gained a matching --no-hub
flag.

Live-verified: ran a real task through ReinOpenWeights with hub
reporting enabled, confirmed the gateway_run event landed with correct
detail and a real commit sha. 4 new tests, 23/23 passing.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/glas_harness/gateway.py

@@ -6,6 +6,13 @@ commit landed, tear the sandbox down. This is the parity proof gating
 any later "retire rein-aharness as a standalone concern" conversation —
 it is not itself that conversation.
 
+GLAS-WP-0002-T03: post the gateway's own State Hub event, independent of
+whatever the rein itself reports (both reins' CLIs are invoked with
+their own hub reporting disabled by their glas-harness adapters — see
+reins/rein_aharness.py / reins/rein_openweights.py). Reported on both
+success and failure, from a `finally` block, so a raised exception still
+leaves an audit trail.
+
 Requires the `sandbox` extra (sand-boxer installed as a sibling
 editable dependency).
 """
@@ -17,6 +24,7 @@ from typing import Any
 from sandboxer.core.manager import SandboxManager
 from sandboxer.models import Consumer, SandboxCreateRequest
 
+from glas_harness import hub
 from glas_harness.contract import Rein, SandboxHandle, ToolCall
 from glas_harness.reins.rein_aharness import ReinAharness
 
@@ -31,6 +39,7 @@ def run_task_through_rein(
     actor: str = "agt",
     project: str = "glas-harness",
     manager: SandboxManager | None = None,
+    report_to_hub: bool = True,
 ) -> dict[str, Any]:
     """Resolve `sandbox_profile`, run one task inside it via `rein`, verify, tear down.
 
@@ -47,6 +56,8 @@ def run_task_through_rein(
         consumer=Consumer(actor=actor, project=project),
     )
     status = manager.create(request)
+    result: dict[str, Any] | None = None
+    error: str | None = None
     try:
         reachability = status.reachability.model_dump(mode="json") if status.reachability else {}
         sandbox = SandboxHandle(
@@ -61,12 +72,56 @@ def run_task_through_rein(
         tool_result = rein.dispatch_tool(session, ToolCall(name="run_task", actor=actor))
         summary = rein.end_session(session)
 
-        return {
+        result = {
             "sandbox_id": status.sandbox_id,
             "tool_ok": tool_result.ok,
             "tool_output": tool_result.output,
             "tool_error": tool_result.error,
             "summary": summary,
         }
+        return result
+    except Exception as exc:
+        error = str(exc)
+        raise
     finally:
         manager.destroy(status.sandbox_id)
+        if report_to_hub:
+            _post_gateway_event(
+                rein=rein,
+                sandbox_profile=sandbox_profile,
+                sandbox_id=status.sandbox_id,
+                project=project,
+                actor=actor,
+                title=title,
+                result=result,
+                error=error,
+            )
+
+
+def _post_gateway_event(
+    *,
+    rein: Rein,
+    sandbox_profile: str,
+    sandbox_id: str,
+    project: str,
+    actor: str,
+    title: str,
+    result: dict[str, Any] | None,
+    error: str | None,
+) -> None:
+    ok = bool(result and result.get("tool_ok"))
+    hub.post_progress_event(
+        summary=f"gateway run: {title} ({'ok' if ok else 'failed'})",
+        event_type="gateway_run",
+        detail={
+            "sandbox_profile": sandbox_profile,
+            "sandbox_id": sandbox_id,
+            "rein": type(rein).__name__,
+            "project": project,
+            "actor": actor,
+            "task_title": title,
+            "ok": ok,
+            "result": result,
+            "error": error,
+        },
+    )