feat(perception): integrate calibrated operator pipeline

Add calibrated K1 projection, recorded and near-live perception qualification, unified Rerun operator layers, bounded replay admission, audited viewer controls, worker experiments, and lab evidence.

plugins/xgrids-k1/profiles/fw-3.0.2/local-network.v2.json

@@ -11,7 +11,7 @@
       "version": "3.0.2"
     },
     "topology": "local-network-matrix",
-    "claim_limit": "One owner-controlled K1 on exact firmware 3.0.2 across controlled Bridge/Mission Core and owner-operated Quick Connect LixelGO/iPhone runs. Direct Connect reuses the physically accepted 99-byte BLE Wi-Fi frame but still requires its own Mission Core physical acceptance. This is not a vendor API or a cross-firmware compatibility claim.",
+    "claim_limit": "One owner-controlled K1 on exact firmware 3.0.2. Bridge/Mission Core is physically accepted. Quick Connect AP activation and association are accepted only on one prepared macOS host with a preinstalled firmware provider; clean-host bootstrap is not implemented. Direct Connect reuses the physically accepted 99-byte BLE Wi-Fi frame but still requires its own Mission Core physical acceptance. This is not a vendor API or a cross-firmware compatibility claim.",
     "connection_modes": [
       {
         "id": "bridge",
@@ -35,10 +35,10 @@
         "id": "quick-connect",
         "topology": "device-ap",
         "direction": "controller-joins-k1-network",
-        "device_network_action": "none",
-        "host_network_action": "single-corewlan-association",
+        "device_network_action": "single-reviewed-ble-ap-activation-write",
+        "host_network_action": "exact-firmware-provider-and-single-corewlan-association",
         "target_address_policy": "reviewed-fixed-k1-ap-private-ipv4",
-        "acceptance": "lixelgo-data-plane-observed-mission-core-physical-acceptance-pending"
+        "acceptance": "prepared-macos-host-physical-accepted"
       }
     ]
   },
@@ -91,6 +91,12 @@
       "kind": "redacted-physical-protocol-report",
       "path": "docs/lab/002_LIXELGO_IPHONE_LOCAL_PROTOCOL_20260716.redacted.md",
       "scope": "Owner-operated LixelGO start/stop mapping, local-only bounded traffic result and left/right RTSP/H.264 camera-preview discovery."
+    },
+    {
+      "id": "lab-004",
+      "kind": "redacted-physical-and-firmware-analysis-report",
+      "path": "docs/lab/004_K1_FW302_AP_CREDENTIAL_PROVIDER_20260720.redacted.md",
+      "scope": "Official K1 3.0.2 firmware credential source, SSID construction, secure provider import, prepared-host physical association and the decision to keep Quick Connect laboratory-only."
     }
   ],
   "transports": [
@@ -118,7 +124,8 @@
       },
       "source_ids": [
         "wifi-provisioning-profile",
-        "lab-001"
+        "lab-001",
+        "lab-004"
       ]
     },
     {