feat: add exact-source dual-site archive v2

[bbingz]

Summary

• capture exact source bytes into immutable local archive storage
• replicate verified manifests and receipts independently to HQ and M1
• ship protected archive operator commands and zero-mutation remote recovery probe
• package a relocatable signed remote server bundle with Tailscale-only deployment guidance

Safety

• no source/archive deletion or eviction is enabled
• remote deployment is staged HQ first, then M1, with per-host rollback snapshots
• FileVault remains enabled; cold boot requires manual unlock

Verification

• full relevant Swift suites and script matrices passed per milestone
• every milestone passed independent Claude Opus and Grok review
• final remote package revision: 64ed6bb