feat(k1): add physical acceptance transport

docs/06_K1_LIVE_VIEWER.md

@@ -150,8 +150,9 @@ publishing anything. One private application-level OpenAPI authority is kept
 separate from the transient vendor ID/serial returned by the BLE-selected K1.
 The fixed Keychain loader, bounded execution lease and dormant facade
 orchestrator now exist. No emission method or live MQTT sink is installed, and
-durable save completion after stop remains open, so `vendor_writes_enabled` is
-false and the physical-button workflow is canonical.
+an acceptance-only transport exists outside the facade. Keychain provisioning,
+physical START/STOP and durable save completion remain open, so
+`vendor_writes_enabled` is false and the physical-button workflow is canonical.
 
 ## Automatic Rerun source and lifecycle
 
@@ -333,8 +334,8 @@ listener and its process memory must be closed unconditionally.
   separate generic media path. Historical sessions predating that archive have
   no recoverable video.
 - Physical double-click remains the K1 scan start/stop control. Any MQTT command
-  publisher needs reviewed Keychain item provisioning, a new write-capable
-  emission type, response-gated one-shot behavior and durable-save proof.
+  promotion needs reviewed Keychain item provisioning, operator-present use of
+  the uninstalled response-gated transport and durable-save proof.
 - No terrain map, elevation model, obstacle segmentation, localization fusion,
   mission planner or vehicle control is implemented by this viewer milestone.
 - Exact coordinate axes and the scanner-to-vehicle transform remain a mounting