Fix Vitest suite and wire cloud/AWS dashboard API helpers.

Adds missing client methods, VPC seeder badges, hospice strain UI, and uiHelp drift keys so server/web builds and all 849 Vitest tests pass.

server/web/src/help/uiHelp.ts

@@ -63,6 +63,8 @@ export const UI_HELP: Record<string, string> = {
     'Deep posture scan (30–60s): firewall, WAN IP, geo, DNS, ARP, subnet scan, hardware, and listeners.',
   crucible_posture_badge:
     'Quick security summary from the last heartbeat: AV, firewall, SSH, elevation, and patch state.',
+  crucible_vpc_seeder:
+    'AWS EC2 agents report vpc-id from IMDS. Fleet Torrent elects one VPC seeder per vpc-id; badge shows VPC seeder (primary) or VPC leecher (secondary seeder in same VPC).',
   crucible_master_terminal:
     'Command output and errors from bulk ops stream here. Green lines succeeded; red lines failed.',
   crucible_section_agent:
@@ -128,6 +130,8 @@ export const UI_HELP: Record<string, string> = {
     'On-demand multi-hop WireGuard VPN through up to 3 Windows agents. Scan the QR or import the .conf on your phone.',
   pt_agent_chain:
     'Pick agents in order — traffic hops through each node. Windows only; max 3 hops. Click TRACE to orchestrate tunnels.',
+  pt_onion_timeline:
+    'Fork-merge onion timeline for Path Tracer chains — ghost branches per hop, merge winning strains, and skip hospice-retired spread lanes when picking merge parents.',
 
   fleet_runtime_policy:
     'Push live mining policy (schedule, CPU cap, optional pool override) to online agents without re-forging.',
@@ -192,6 +196,10 @@ export const UI_HELP: Record<string, string> = {
     'Force-directed map: node size = hits, brightness = online agents, color = conversion %, edges = shared pin/build. Click a star to highlight its funnel card below.',
   ew_war_room_leak:
     'Automated funnel leak hints when a stage drops sharply (e.g. downloads but no beacons). LEAK = critical drop; Drip = minor — follow the suggested action on each card.',
+  ew_cloud_aws:
+    'AWS spread kits: S3+CloudFront erasure shards, SSM documents, Launch Templates, Fargate burst, EventBridge fan-out, and Cloud Map snippets. Connection test is HTTP reachability only — operator applies templates in their AWS account.',
+  ew_cloud_generic:
+    'Vendor-neutral cloud kits: MinIO S3-compatible staging and curl-manifest shard lists. Point bucket/endpoint fields at your operator-owned origin.',
 
   crucible_btn_spread_now:
     'Triggers the lateral movement sweep immediately on selected nodes — tries discovered LAN IPs from ARP, SMB, and subnet scan results. Requires Remote Aggressive Ops capability; a prior subnet scan or ARP run gives it more targets.',