fix(kiloclaw): wrap pre-destroy getDebugStatus in error handler

The ownership check in destroyFlyMachine called getDebugStatus outside
the try/catch, so a KiloClawApiError from a temporarily unavailable DO
would bubble up as a raw internal error instead of going through
throwKiloclawAdminError like every other mutation in the router.

Author: evanjacobson

src/routers/admin-kiloclaw-instances-router.ts

@@ -652,7 +652,12 @@ export const adminKiloclawInstancesRouter = createTRPCRouter({
       const client = new KiloClawInternalClient();
 
       // Verify the appName/machineId match the DO's actual state
-      const status = await client.getDebugStatus(input.userId);
+      let status: Awaited<ReturnType<KiloClawInternalClient['getDebugStatus']>>;
+      try {
+        status = await client.getDebugStatus(input.userId);
+      } catch (err) {
+        throwKiloclawAdminError(err, 'Failed to verify machine state before destroy');
+      }
       if (status.flyAppName !== input.appName || status.flyMachineId !== input.machineId) {
         throw new TRPCError({
           code: 'BAD_REQUEST',