feat(k1): add physical acceptance transport

plugins/xgrids-k1/profiles/README.md

@@ -40,10 +40,13 @@ literal `{device_id}:ModelingRequest` session relation, retained start settings
 and numeric success code. Retained client/wire evidence identifies OpenAPI as
 one private application-level value rather than a per-scanner profile. A fixed
 read-only macOS Keychain loader, bounded in-memory lease and dormant facade
-orchestrator now exist. No request-emission method or live MQTT sink exists;
-operator-owned Keychain item provisioning, reviewed emission, durable save
-completion, timeout and rollback behavior remain unresolved. Acquisition
-therefore stays `operator-manual` through the verified physical double-click.
+orchestrator now exist. The installed runtime has no request-emission method or
+live MQTT sink. A separate uninstalled acceptance transport implements the
+retained MQTT session, exact response subscriptions and poison-on-unknown
+one-shot behavior. Operator-owned Keychain item provisioning, physical
+acceptance, durable save completion and rollback evidence remain unresolved.
+Acquisition therefore stays `operator-manual` through the verified physical
+double-click.
 The standalone encoder models the recovered wire schema, including enum values
 outside the retained request. It is not an authorization policy: any future
 publisher must enforce the exact profile mapping (`2/1/0`, omitted