Add Linux server mode foundation

[XploitGost]

Summary

• add explicit NetBotPro runtime profiles with strict server-mode validation
• add /api/health, /api/ready, and profile metadata in monitoring metrics
• add safe multi-node identity/capability metadata with forbidden capability rejection
• add Linux systemd, Docker/Compose, reverse proxy, HTTPS/TLS, and live-capture permission docs

Validation

• python -m pip check
• python -m unittest discover -s tests -v (360 tests)
• cd frontend && npm ci && npm run test:ui (52 tests)
• cd frontend && npm run build
• cd frontend && npm audit --omit=dev && npm audit
• cd desktop/electron && npm ci && npm audit --omit=dev && npm audit
• cd desktop/electron && node --check main.cjs && node --check preload.cjs
• powershell -ExecutionPolicy Bypass -File scripts/qa/electron_smoke.ps1
• python benchmarks/long_soak_runner.py --profile light_desktop --duration-sec 5 --events-per-sec 100 --flows 10 --websocket-clients 1 --ci-safe --output .runtime/benchmarks/step12-real-load-smoke
• python benchmarks/soak_test_pipeline.py --duration-sec 10 --events-per-sec 200 --flows 20 --ci-safe --output .runtime/benchmarks/step12-soak-smoke
• python -m PyInstaller packaging/pyinstaller/netbotpro_backend.spec --clean --noconfirm
• python scripts/release/stage_backend_runtime.py
• python scripts/qa/packaged_backend_smoke.py

Notes

• Docker daemon/static compose parse could not run locally because docker is not installed in this shell.
• Desktop npm ci completed with Node engine warnings because local Node is v20.11.0; docs recommend Node 20.17+.
• This step does not add command/control, remote shell, command execution, file collection, raw payload/packet/PCAP forwarding, TLS decryption, MITM, credential collection, IPS/auto-blocking, browser scraping/injection, or AI autonomous actions.