Get a gate by id

Use when: caller has a gate id and needs the full gate configuration (most common single-gate read path)

Returns a single gate’s full configuration plus current health flags (deprecations, on-fallback, unrecoverable provider drift). Health detection failures are absorbed — the gate still returns; only the health field is null.