feat(orchestrator): mount the host's agents-council state read-only as /kept

The W4 resources view reads gates.db and the resources/ files of the host sampler. The installer creates ~/.local/state/agents-council/resources and writes KVB_ORCHESTRATOR_KEPT into .env; compose binds it read-only at /kept without creating the host path, and the server passes --kept to the hub.

🎯 Fix: 90 %
💥 Break: 3 %
💸 Cost: 100 %
⏱️ Time: 100 %
🛡️ Security: 100 %
🏆 Score: 87
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

orchestrator/compose.yml

@@ -49,6 +49,8 @@ services:
       - /tree/branch-tree.json
       - --timers
       - /timers
+      - --kept
+      - /kept
       - --vendor
       - /app/vendor
       - --cleanup
@@ -117,6 +119,12 @@ services:
         read_only: true
         bind:
           create_host_path: false
+      - type: bind
+        source: "${KVB_ORCHESTRATOR_KEPT:?written into .env by scripts/install.sh}"
+        target: /kept
+        read_only: true
+        bind:
+          create_host_path: false
       - type: bind
         source: "${KVB_ORCHESTRATOR_APPROVERS:?written into .env by scripts/install.sh}"
         target: /approvers