alerts -> private scratch repo (not public Space discussions)

Robustness hardening: fail-loud refresh (Discussion alerts, gpu supervision, fail-closed guard, retry queue, pinned image), serving hardening (kind validation, bounded caches, cap clamp), build provenance (built_at), heartbeat watchdog