Watch v2: unified /v1/updates stream, notify levels, watcher client with status/exec/peek, cursor-integrity guards

Serve a ready-made long-poll watcher: clients/collab_watch.sh at GET /v1/watch.sh