Remove hardcoded fallbacks, add snapshot-driven service lifecycle

Production all-in-one container with real service execution

Add task engine, exposure policy, auth scenario, pivot mechanics, curriculum wiring

Full OpenRange implementation: environment, builder, validator, agents, tests