feat(orchestrator): operator composer with signed text and voice

Stream -> Radio gets one line per station with state, play and stop,
autoplay and CSP refusals as row state and toast, and the speaking agent
pulsing there and in the Orbit and Chord views. The composer sends on all
seven channels; push-to-talk records with MediaRecorder, whisper.cpp
transcribes off the request thread under per-minute and per-hour caps,
and the recording travels only when "Aufnahme anhängen" is ticked.

Every operator message, the mayday clear, the day and night board
actions and a settings save that adds a stream origin take the passkey;
the hub verifies each signature once against the pinned keys before it
relays or acts. The container gets TMPDIR=/scratch so that verification
no longer fails on the read-only root.

A denial now signs its recipient: the inbox and the signing step resolve
it through one function, a claim set naming several agents leaves a
direct denial without recipient, and a recipient that changed after the
inbox showed it is refused with 409. operator_message returns only the
signed reason for a denial, never the agent's own words the radio row
quotes, and the permission hook hashes the signed recipient too.

🎯 Fix: 95 %
💥 Break: 3 %
💸 Cost: 99 %
⏱️ Time: 68 %
🛡️ Security: 100 %
🏆 Score: 100
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

orchestrator/server.py

@@ -11,9 +11,12 @@
     --pages: directory every review page must lie in.
     --state: writable directory for reviews.json, asks.json, decisions.json,
         messages.json, rules.json, jobs.json, marks.json, settings.json,
-        log.jsonl, the page copies and uploads/<id>/<name>.
+        log.jsonl, the page copies, uploads/<id>/<name>, the operator's last
+        50 voice recordings beside those a stored message carries as
+        voice/<id>.wav and the replay store of the signatures the hub checks
+        itself as replay/messages.json.
     --host-state: the state directory's path on the host, named in the radio
-        rows that carry an upload.
+        rows that carry an upload or a voice recording.
     --skills: installed skills directory holding the kvb-org-radio,
         kvb-org-rasci and kvb-org-sunset scripts.
     --transcripts: directory the Claude Code transcripts (*.jsonl) lie under.
@@ -48,8 +51,9 @@
     --scratch: writable directory the engines use as HOME and TMPDIR.
     --approvers: the pinned passkeys, mounted read-only; the hub lists their
         ids and algorithms for the page, never pins, and verifies a signature
-        only for the denials and rules it acts on itself; every other approval
-        its executor verifies.
+        only for the operator messages, denials and rules it acts on itself,
+        and for the mayday and day/night board actions and new stream origins
+        it runs as the operator; every other approval its executor verifies.
 """
 
 from __future__ import annotations