feat: aggregate observable Athena runtime MVP

[Super-Sky]

Scope

• aggregate the Docker runtime profile, remote tool authentication, app-run auth and privileged trace payloads
• expose run manifest, stop reason, tool transcript, redacted model input/output and performance-visible trace data in the Control Plane
• fix duplicate chat task seed registration and add a regression test
• add optional standard Docker build proxy inputs without committing a local proxy address

Verification

• go test ./...
• npm run build in web
• Compose config validation
• local dual-service smoke: authentication, callback grant/revocation, runtime trace, and fund strategy data

Known environment limitation

The full Docker smoke was attempted with the host proxy passed as build args. Docker received it, but Yarn dependency downloads from the current local proxy repeatedly timed out; this is recorded as an environment-network limitation, not a passed Docker assertion.

Refs #30