Add local control plane and jailbreak agent

[everettjf]

Summary

• add controllable capture lifecycle, metrics, runtime filters, and late-image rebinding
• add a token-authenticated embedded HTTP/WebSocket control server
• add the embedded React Web Console with live status streaming
• add the Theos jailbreak Agent and appletraced daemon package for rootless/rootful environments
• add consolidated pre-device validation and explicit device-only validation gates

Validation

• ./scripts/verify_without_device.sh
• 13 Swift tests
• 24 Python tests
• text and binary stress tests with 200,000 event pairs each
• standard and experimental iOS Simulator hook scenarios
• iOS 27 SDK arm64e App/framework build and slice inspection
• AppleTraceServer iOS cross-build
• jailbreak Agent/daemon start, filters, flush, and stop round trip
• rootless and rootful Theos package builds for arm64 and arm64e
• npm audit: 0 vulnerabilities

Physical-device-only validation remains documented in docs/device-validation.md.