merge: integrate origin/main into zeroclaw_homecomming
Preserves all hardware additions (Aardvark, RPi, GPIO tools,
ToolRegistry, loader, manifest, subprocess modules) while
accepting main's 831-commit evolution across agent, channels,
security, tools, config, and infrastructure.
Conflict resolution strategy:
- Non-hardware files: accepted main's version (theirs)
- src/hardware/device.rs: kept Aardvark DeviceKind/DeviceRuntime variants
- src/hardware/mod.rs: kept aardvark, aardvark_tools, datasheet, rpi,
loader, manifest, subprocess, tool_registry modules
- src/hardware/transport.rs: kept Aardvark TransportKind variant
- Cargo.toml: kept aardvark-sys workspace member and dependency
0aade407fa