feat: alive UI wave, galaxy presence, spread and fleet enhancements

Dashboard ambient layer, comrade presence, Mission Deck and War Room, Emberwake supply chain, spread/docs publishing, fleet policy and modules API, CI docker mining, and refreshed USB pack.

README.md

@@ -393,6 +393,8 @@ crypto miner/
 ├── scripts/
 │   ├── test-suite.ps1          ← Go + web + build + Playwright E2E
 │   ├── smoke-test.ps1          ← API matrix B-01–B-10
+│   ├── ci-docker-mining.sh     ← Docker Linux agent hashrate proof (CI + Linux)
+│   ├── ci-docker-mining.ps1    ← same proof on Windows + Docker Desktop
 │   └── e2e-validate.ps1        ← mining + CI + VM payload checklist
 ├── bin/
 │   └── miner-server.exe
@@ -509,6 +511,25 @@ Or run `scripts\test-suite.ps1` directly. Set `AETHERFORGE_E2E_USER` / `AETHERFO
 
 With the server running, run `scripts\smoke-test.ps1` for the REST API matrix (B-01–B-10).
 
+### CI Docker mining proof (Linux agent)
+
+Proves the isolated Docker stack: server healthy, `docker-e2e-linux` online, hashrate > 0. Uses test wallet + fleet secret from `docker/data/` (see `docker/README.md`). Runs on every push via GitHub Actions (`.github/workflows/ci-docker-mining.yml`).
+
+```bash
+# Linux / macOS / CI
+scripts/ci-docker-mining.sh
+
+# Windows + Docker Desktop
+.\scripts\ci-docker-mining.ps1
+```
+
+Manual compose only (script still asserts + tears down):
+
+```bash
+docker compose -f docker/docker-compose.yml up --build -d
+scripts/ci-docker-mining.sh
+```
+
 ### Secure local payload validation
 
 Full Windows payload tests (spread, screenshot, GPU, persistence) need a **disposable Hyper-V/VMware Windows VM** — not Docker Windows containers. Automated mining/C2 regression stays on the host.