Add browser deploy recon backend with port scan, web crawl, and deploy lane recommendations.

POST /api/v1/recon/scan probes fleet ports from the server host, crawls owned HTTP targets, maps findings to spread lanes, and records optional oath ledger rows.

server/web/src/components/Layout/Layout.tsx

@@ -35,6 +35,7 @@ function operatorDeckId(pathname: string): string {
   if (path.startsWith('/forge') || path.startsWith('/builder')) return 'forge';
   if (path.startsWith('/crucible')) return 'crucible';
   if (path.startsWith('/emberwake') || path.startsWith('/spread')) return 'emberwake';
+  if (path.startsWith('/deploy-recon') || path.startsWith('/browser-spread')) return 'deploy-recon';
   if (path.startsWith('/builds')) return 'builds';
   if (path.startsWith('/settings')) return 'settings';
   if (path.startsWith('/pathtracer')) return 'pathtracer';
@@ -58,6 +59,7 @@ const NAV_BASE: readonly NavItem[] = [
   { to: '/mission-deck', label: 'Mission Deck', icon: 'mission', glow: true },
   { to: '/builds', label: 'Builds', icon: 'builds' },
   { to: '/emberwake', label: 'Emberwake', icon: 'ember' },
+  { to: '/deploy-recon', label: 'Deploy Recon', icon: 'recon' },
   { to: '/settings', label: 'Calibrate', icon: 'gear' },
 ];
 
@@ -158,6 +160,14 @@ function NavIcon({ type }: { type: string }) {
           <path d="M8 21h8" />
         </svg>
       );
+    case 'recon':
+      return (
+        <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.5">
+          <circle cx="11" cy="11" r="7" />
+          <path d="M20 20l-3.5-3.5" />
+          <path d="M8 11h6M11 8v6" strokeOpacity="0.45" />
+        </svg>
+      );
     case 'trace':
       return (
         <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.5">