Add Mac Mini Control Deck mini app

[cmsjade5000]

Summary

• Adds a Mac Mini Control Deck experience to the ORION Telegram Mini App with Overview, ORION, Workstation, Repos, Cleanup, and Activity lanes.
• Adds local loopback-token auth for browser use while preserving Telegram init-data auth.
• Adds read-only collectors, allowlisted action descriptors, cleanup preview/quarantine/restore flow, audit events, and a generated WebP mission-control texture.

Security Notes

• No generic shell execution path was added; backend actions are allowlisted only.
• Local browser auth is loopback-bound and token/cookie gated.
• Cleanup execution is quarantine-first with explicit confirmation and restore support.
• UI errors redact secret/token/key-looking backend text before display.

Verification

• npm test
• npm run orion-miniapp:build
• git diff --check
• Browser smoke at http://127.0.0.1:8797/local: deck loaded, cleanup preview worked, console had 0 warnings/errors.
• Desktop and mobile viewport screenshots captured locally at /tmp/control-deck-desktop.png and /tmp/control-deck-mobile.png.

Notes

• Draft PR because this branch already carried existing automated ORION cleanup commits before this Control Deck commit.