Add physical Remote Assist qualifier

[Chris-ObtuseAI]

What changed

• adds scripts/Qualify-RampageRemoteAssist.ps1
• selects exactly one fresh enrolled worker advertising the shipped Remote Assist view capability
• accepts only the protected loopback controller API and a bounded regular token file
• validates the 0.3.0 controller, STOP state, signed 30-second lease bounds, frame contract, JPEG markers, byte count, and SHA-256 digest
• closes the session and requires the revoked frame route to return HTTP 404
• emits a structured physical qualification receipt without injecting any input
• documents the remaining worker-visible indicator and witnessed control boundary honestly

Why

The final physical owner-to-laptop gate should produce deterministic evidence, not rely on a visual impression that two machines appear connected. This command turns the live view path into a repeatable receipt while deliberately avoiding automated pointer or keyboard movement.

Validation

• PowerShell parser — PASS
• live offline-worker denial — PASS with exact fail-closed reason
• deterministic positive mock — PASS for lease, JPEG bytes, SHA-256, close, and post-close 404
• scripts/Validate-Showcase.ps1 — PASS
• scripts/Assert-RampageVersion.ps1 -Tag v0.3.0 — PASS across nine surfaces
• git diff --check — PASS

Honest boundary

The qualifier itself is ready, but the evidence page remains PENDING until the physical laptop runs 0.3.0, opts in, returns a real frame, visibly displays active access, and completes a witnessed control interaction.