fix: opt in one additional daily account facts publisher

[Pigbibi]

Changes

• Allow the existing daily account-facts publisher to include one additional protected target only when the repository opt-in flag is enabled.
• Keep the default scheduled target unchanged and manual publication confined to the selected target.
• Resolve protected target configuration before cloud authentication and prevent one publication failure from canceling the other target.
• Exercise isolated configuration and publication for all existing additional target choices, including GitHub Actions case-insensitive flag comparison.

Verification

• 96 focused tests passed.
• actionlint, Ruff, diff checks, and added-line privacy checks passed.
• Independent review passed after correcting the flag comparison test semantics.

This change does not create or enable a cloud scheduler, read a broker account, or authorize trading. The additional daily flag remains unset; cloud task activation and natural update verification are separate.