feat(k1): add offline control execution gate

docs/06_K1_LIVE_VIEWER.md

@@ -148,7 +148,8 @@ observed pre-START requests plus START/STOP, correlates DeviceInfo and modeling
 responses, and classifies live device states without importing MQTT or
 publishing anything. One private application-level OpenAPI authority is kept
 separate from the transient vendor ID/serial returned by the BLE-selected K1.
-Secure authority loading and durable save completion after stop remain open, so
+The fixed Keychain loader and offline response orchestrator now exist, but live
+execution-lease wiring and durable save completion after stop remain open, so
 `vendor_writes_enabled` is false and the physical-button workflow is canonical.
 
 ## Automatic Rerun source and lifecycle
@@ -331,8 +332,8 @@ listener and its process memory must be closed unconditionally.
   separate generic media path. Historical sessions predating that archive have
   no recoverable video.
 - Physical double-click remains the K1 scan start/stop control. Any MQTT command
-  publisher needs reviewed private application-authority loading, response-gated
-  one-shot behavior and a proven durable-save completion gate.
+  publisher needs reviewed Keychain provisioning/execution-lease wiring,
+  response-gated one-shot behavior and a proven durable-save completion gate.
 - No terrain map, elevation model, obstacle segmentation, localization fusion,
   mission planner or vehicle control is implemented by this viewer milestone.
 - Exact coordinate axes and the scanner-to-vehicle transform remain a mounting