Force-residential proxy guard: _resolve_proxy_url now always injects
groups=["RESIDENTIAL"] when apifyProxyGroups is missing or empty,
preventing datacenter-exit 403s from subito.it's DataDome layer.
Fail fast: if Actor.create_proxy_configuration raises or returns None
(plan does not include residential proxy), raise RuntimeError with a
clear message instead of falling back to direct routing.