feat(orchestrator): mount the host's agents-council state read-only as /kept

The W4 resources view reads gates.db and the resources/ files of the host sampler. The installer creates ~/.local/state/agents-council/resources and writes KVB_ORCHESTRATOR_KEPT into .env; compose binds it read-only at /kept without creating the host path, and the server passes --kept to the hub.

🎯 Fix: 90 %
💥 Break: 3 %
💸 Cost: 100 %
⏱️ Time: 100 %
🛡️ Security: 100 %
🏆 Score: 87
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

orchestrator/kvb_orchestrator/hub.py

@@ -49,6 +49,7 @@ class Places:
     vendor: Path
     cleanup: Path
     offices: Path
+    kept: Path
 
 
 def environment(templates: Path) -> jinja2.Environment:
@@ -89,6 +90,7 @@ class Hub(Mcp, Reviewing, Asking, Messaging, Choosing, Approving, Denying, Reque
     agent_sessions: Path
     model: Model
     timers: Path
+    kept: Path
     settings: Settings
     redirects: Redirects
     speech: Speech
@@ -137,6 +139,7 @@ def open_hub(council: Path, pages: Path, public_port: int, state: Path, host_sta
         agent_sessions=state / SNAPSHOT,
         model=model,
         timers=places.timers,
+        kept=places.kept,
         council=council,
         pages=pages,
         public_port=public_port,