feat(k1): add offline control execution gate

plugins/xgrids-k1/profiles/README.md

@@ -38,9 +38,10 @@ The v1 loader rejects every `write_enabled: true`. Owner-operated LixelGO wire
 capture verifies the `ModelingRequest` topic, action values, field layout,
 literal `{device_id}:ModelingRequest` session relation, retained start settings
 and numeric success code. Retained client/wire evidence identifies OpenAPI as
-one private application-level value rather than a per-scanner profile. Its
-secure runtime loading remains unresolved, as do durable save completion,
-timeout and rollback behavior. Acquisition therefore
+one private application-level value rather than a per-scanner profile. A fixed
+read-only macOS Keychain loader and offline response orchestrator now exist;
+operator-owned provisioning/execution-lease wiring, durable save completion,
+timeout and rollback behavior remain unresolved. Acquisition therefore
 stays `operator-manual` through the verified physical double-click.
 The standalone encoder models the recovered wire schema, including enum values
 outside the retained request. It is not an authorization policy: any future