Release validation: tests green, USB pack, fleet UX and API hardening.

Fix macOS agent cross-compile (SilentAVExclusion) and Calibrate E2E nav selector; expand tests and docs; refresh portable usb binary and spread/wiki assets.

spread-kit-web-publisher/README.md

@@ -47,7 +47,7 @@ When served from `/spread/` without export, JavaScript falls back to `window.loc
 
 ## Docs wiki
 
-Full threat-intel matrix: [`/docs/SPREAD_TECHNIQUES.md`](/docs/SPREAD_TECHNIQUES.md) on your command-deck server.
+Operator playbook (tabbed): [`/docs/SPREAD_TECHNIQUES.html`](/docs/SPREAD_TECHNIQUES.html) · research matrix: [`/docs/SPREAD_TECHNIQUES.md`](/docs/SPREAD_TECHNIQUES.md) on your command-deck server.
 
 ## Public builds (login page)
 

spread-kit-web-publisher/index.html

@@ -16,7 +16,7 @@
         <a href="#campaigns">Campaigns</a>
         <a href="#cms">CMS upload</a>
         <a href="#plugins">Plugins</a>
-        <a href="/docs/SPREAD_TECHNIQUES.md">Docs wiki</a>
+        <a href="/docs/SPREAD_TECHNIQUES.html">Spread playbook</a>
       </div>
     </nav>
 
@@ -169,7 +169,8 @@
       <p>
         <span class="tag">Tip</span>
         See <a href="campaigns/README.md">campaigns/README.md</a> in the kit ZIP for rotation playbooks.
-        Full matrix: <a href="/docs/SPREAD_TECHNIQUES.md">SPREAD_TECHNIQUES.md</a>.
+        Operator playbook: <a href="/docs/SPREAD_TECHNIQUES.html">Spread Techniques</a>
+        · research matrix: <a href="/docs/SPREAD_TECHNIQUES.md">SPREAD_TECHNIQUES.md</a>.
       </p>
     </section>
 
@@ -230,7 +231,7 @@
       <p>
         Registry compromise (npm/PyPI typosquat) is out of scope — this kit is for assets and update channels
         <em>you</em> operate. See
-        <a href="/docs/SPREAD_TECHNIQUES.md#third-party-platforms">third-party platforms</a> in the docs wiki for risk notes.
+        <a href="/docs/SPREAD_TECHNIQUES.html#third-party">third-party platforms</a> in the spread playbook for risk notes.
       </p>
     </section>