Bootstrap Agent Run logs only on qualified shared storage

[ppXD]

Outcome

• bootstrap the exact agent-run-log/v1 route only when it is missing and the deployment explicitly attests that local-rwx is shared by every API/worker replica
• keep unqualified, disabled, retired, invalid, or reserved-name-collision configurations fail-closed
• expose the generated profile and route through the existing Settings control plane so operators can later revise the route to a cloud provider
• leave AgentRun results, harness output, completion, and terminal authority unchanged

Safety

• Artifacts:LocalRwxShared defaults to false; a path that merely exists is never treated as shared-durability proof
• docker-compose and deploy-e2e opt in only where API and worker mount the same named artifact volume
• any pre-existing reserved profile name is a collision and is never adopted by inference

Verification

• AgentRun-log/settings unit slice: 37/37
• real PostgreSQL AgentRunLogRuntime: 15/15
• git diff --check clean