Direct agent manager and self-hosted roost

[ehrlich-b]

Summary

• recenter Wingthing on direct, multi-wing agent management with qualified remote MCP control
• make self-hosted roost and localhost HTTPS the primary private-browser path
• enforce hosted relay entitlement and wing-local relay opt-out without regressing existing org deployments
• harden Linux rootless egress, lifecycle, auth, preview, audit, persistence, and compatibility boundaries
• replace aspirational public patterns with executable workflows and retain the internal gap audit in docs

Verification

• make check
• go test -race ./...
• go vet ./...
• make test-integ
• make test-compat
• make test-web
• make test-linux and make test-linux-ubuntu
• make test-vuln and make release
• WSL2 native sandbox/provider batteries
• Bryan organization-mode browser and real-session canaries
• two-physical-wing direct MCP canary with real Codex and Claude sessions

Promotion hold

Keep this draft until fresh-human enrollment and the remaining production account-cohort canaries in docs/bryan-wingthing-direct-control-field-report.md are complete. This PR does not authorize a merge or production deployment.