feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e

Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.

server/web/src/components/Layout/Layout.tsx

@@ -26,6 +26,7 @@ const NAV = [
   { to: '/crucible', label: 'Crucible', icon: 'crucible' },
   { to: '/forge', label: 'Forge', icon: 'forge' },
   { to: '/builds', label: 'Builds', icon: 'builds' },
+  { to: '/emberwake', label: 'Emberwake', icon: 'ember' },
   { to: '/guide', label: 'Field Guide', icon: 'guide' },
   { to: '/settings', label: 'Calibrate', icon: 'gear' },
   { to: '/pathtracer', label: 'Path Tracer', icon: 'trace' },
@@ -85,6 +86,13 @@ function NavIcon({ type }: { type: string }) {
           <path d="M10 12l1.5 2L14 11" />
         </svg>
       );
+    case 'ember':
+      return (
+        <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.5">
+          <path d="M12 3c2 4 4 5 4 9a4 4 0 01-8 0c0-4 2-5 4-9z" />
+          <path d="M8 21h8" />
+        </svg>
+      );
     case 'trace':
       return (
         <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.5">