Import the wilm endpoint-monitor and channel-distribution work

Everything on origin/wilm that is not on the published main, applied as one
change because the published history has rewritten hashes: per-commit
cherry-pick conflicts against our main even though the squashed diff applies
clean.

Contents: endpoint monitor catalog + policy attachment + warn-only drift
reconciler, operator issue reports from the tray, agent launch-path allowlist,
and the GHCR channel-image distribution path for dev workstations.

NOT READY FOR main. Open items:
  - 10 new routes are absent from docs/api-inventory.json, so
    test_api_inventory_parity fails. That gate SKIPS on the published mirror
    (the test ships, its data file is scrubbed), which is why wilm never saw it.
  - dev-bootstrap.ps1 and Start-ShopDBDev.ps1 hardcode the ge-aero GitHub org.
  - plugins/endpoints/plugin.py carries a whitespace-only re-indent.

Scope: product

plugins/computers/frontend/views/BusinessPoliciesList.vue

@@ -1,8 +1,8 @@
 <template>
   <div>
     <div class="page-header">
-      <h2>Business Policies</h2>
-      <button class="btn btn-primary" @click="openModal()">+ Add Business Policy</button>
+      <h2>Site Policies</h2>
+      <button class="btn btn-primary" @click="openModal()">+ Add Site Policy</button>
     </div>
 
     <div class="card">
@@ -42,7 +42,7 @@
                 </td>
               </tr>
               <tr v-if="policies.length === 0">
-                <td colspan="6" style="text-align:center; color: var(--text-light);">No business policies</td>
+                <td colspan="6" style="text-align:center; color: var(--text-light);">No site policies</td>
               </tr>
             </tbody>
           </table>
@@ -53,7 +53,7 @@
     <div v-if="showModal" class="modal-overlay">
       <div class="modal modal-lg">
         <div class="modal-header">
-          <h3>{{ editing ? 'Edit Business Policy' : 'Add Business Policy' }}</h3>
+          <h3>{{ editing ? 'Edit Site Policy' : 'Add Site Policy' }}</h3>
         </div>
         <form @submit.prevent="save">
           <div class="modal-body">
@@ -196,14 +196,14 @@ async function save() {
     closeModal()
     loadData()
   } catch (err) {
-    error.value = apiError(err, 'Failed to save business policy')
+    error.value = apiError(err, 'Failed to save site policy')
   } finally {
     saving.value = false
   }
 }
 
 async function remove(p) {
-  if (!confirm(`Delete business policy "${p.name}"?`)) return
+  if (!confirm(`Delete site policy "${p.name}"?`)) return
   try {
     await computersApi.policies.business.remove(p.businesspolicyid)
     loadData()