Fix the shell recipe sentinel for optional columns

_sentinel_value in projects/ores.codegen/src/codegen/org_loader.py returns the value a generated recipe script sends for a column. It carries an entry per non-optional C++ type and falls back to __none__ for anything else, and std::optional<...> has no entry. The shell's absent-value token is '-' (ores.shell.api command_token.hpp, absent_token), so a generated script whose optional column is a uuid sends a token the client cannot parse. The client aborts with Invalid value for <field>: __none__ before the request leaves, which defeats the script's purpose: it exists to prove the command is registered, the subject has a subscriber and the request decoded.

Found on 2026-09-26 during the ores.analytics clean pass. Three of the 40 generated analytics scripts abort this way, all of them pricing_model_product_parameters writes, because their optional pricing_model_product_id is a uuid: add, set and put-many. The other three analytics entities reach the service because their recipes carry no optional uuid.

Evidence:

1. projects/ores.analytics/modeling/ores.analytics.pricing_model_product_parameter.org declares pricing_model_product_id as std::optional<boost::uuids::uuid>.
2. org_loader._sentinel_value maps boost::uuids::uuid to the zero uuid and has no std::optional entry, so the optional column falls through to __none__.
3. projects/ores.shell/api/include/ores.shell/app/command_token.hpp reserves '-' for an absent optional, so from_token throws on __none__ and the generated unit names the field it rejected. The shell prints ✗ Invalid value for pricing_model_product_id: __none__ and aborts the script before the request leaves.

The fix is one branch in _sentinel_value: an optional type maps to '-'. It is a codegen-round change rather than a per-component one, because iam declares seven optional uuid columns, so the fix rewrites iam's committed recipes and its script library as well. A regression test belongs in the codegen suite beside test_org_loader_keys.py.

• projects/ores.codegen/src/codegen/org_loader.py — _sentinel_value
• projects/ores.shell/api/include/ores.shell/app/command_token.hpp — absent_token

• Bring ores.analytics to the clean standard — where this was found, and the V04 exception it is recorded as.