Scripts now choose per invocation whether an external system call is synchronous (all failures return to script) or cached (transient failures go to store-and-forward). Mirrors the existing Database.Connection/CachedWrite pattern. Updated ESG, Site Runtime script API, high-level requirements, and design doc.