feat(pilot): add portable constrained Core research pilot

[bsaunders-ops]

Summary

• add a portable, constrained local Core research pilot with locked configuration, deterministic bootstrap, preflight, start/stop, Desktop launch, and encrypted export/import workflows
• add trusted ACP agent-output publishing and hosted web-search citation support while preserving strict owner and channel boundaries
• support Git-free pilot deployments and source-only VM transfer without carrying credentials, identities, messages, media, volumes, binaries, or caches
• fix ACP boolean environment normalization and make the Windows Desktop helper's WSL identity lookup argument-safe

Why

Core needs a reproducible local pilot that can move between Windows/WSL VMs, operate only on public or synthetic research, and fail closed when identity, channel, credential, publishing, or process-ownership constraints are not satisfied.

User and developer impact

Operators can restore the source bundle on a fresh VM, build the five required release binaries, bootstrap stable local identities and channels, enter the OpenAI credential locally, and launch the relay, constrained ACP agent, and Windows Desktop through documented helpers. Re-running bootstrap and start is idempotent, and stop preserves Docker volumes.

The pilot agent responds only to the configured owner in core-research. It does not subscribe or reply to core-control, and non-owner messages do not trigger responses.

Root causes addressed

• Core's configuration intentionally uses numeric shell booleans (1/0), while Clap's boolean environment parser accepts true/false; the launcher now normalizes values at the process boundary.
• The Desktop helper nested an awk program inside Windows-to-WSL shell quoting, allowing the native argument boundary to strip significant tokens; it now resolves the WSL home and reads the exact banker assignment through argument-safe commands.

Validation

• cargo fmt --all -- --check
• cargo test --locked -p buzz-acp — 685 unit tests and 9 integration tests passed
• ./scripts/test-core-pilot.sh
• ./scripts/test-core-pilot-bootstrap.sh
• ./scripts/test-core-pilot-portability.sh
• five required release binaries built successfully during VM restoration
• live relay readiness, owner-triggered synthetic response, non-owner negative control, control-channel negative control, stop/restart, Desktop reconnection, and idempotent repeated start verified
• all 17 branch commits contain DCO signoff

Safety notes

The transfer and repository are source-only. No OpenAI key, private identity material, messages, media, Docker volumes, compiled binaries, or caches are included. The live smoke test used synthetic facts only and did not send external communications.