feat(k1): wire dormant control lease

docs/06_K1_LIVE_VIEWER.md

@@ -148,9 +148,10 @@ observed pre-START requests plus START/STOP, correlates DeviceInfo and modeling
 responses, and classifies live device states without importing MQTT or
 publishing anything. One private application-level OpenAPI authority is kept
 separate from the transient vendor ID/serial returned by the BLE-selected K1.
-The fixed Keychain loader and offline response orchestrator now exist, but live
-execution-lease wiring and durable save completion after stop remain open, so
-`vendor_writes_enabled` is false and the physical-button workflow is canonical.
+The fixed Keychain loader, bounded execution lease and dormant facade
+orchestrator now exist. No emission method or live MQTT sink is installed, and
+durable save completion after stop remains open, so `vendor_writes_enabled` is
+false and the physical-button workflow is canonical.
 
 ## Automatic Rerun source and lifecycle
 
@@ -332,8 +333,8 @@ listener and its process memory must be closed unconditionally.
   separate generic media path. Historical sessions predating that archive have
   no recoverable video.
 - Physical double-click remains the K1 scan start/stop control. Any MQTT command
-  publisher needs reviewed Keychain provisioning/execution-lease wiring,
-  response-gated one-shot behavior and a proven durable-save completion gate.
+  publisher needs reviewed Keychain item provisioning, a new write-capable
+  emission type, response-gated one-shot behavior and durable-save proof.
 - No terrain map, elevation model, obstacle segmentation, localization fusion,
   mission planner or vehicle control is implemented by this viewer milestone.
 - Exact coordinate axes and the scanner-to-vehicle transform remain a mounting