Merge nucleic/clever-velvet-gecko-cppk into dev

README.md

@@ -4,7 +4,10 @@ This directory builds **narOS** (the Nucleic Agent Runtime OS) per
 [docs/NAROS.md](../docs/NAROS.md): a Debian-trixie-derived rootfs assembled from scratch
 with `mmdebstrap` against a pinned `snapshot.debian.org` date, plus a Nucleic apt package
 layer (nash, naros-init, tier meta-packages, …). CI (`.github/workflows/naros.yml`)
-publishes OCI images to GHCR (`naros-base`, later `naros-agent`/`naros-runner`) and the
+publishes OCI images to GHCR — `naros-base` and `naros-agent`, both shipping today
+(`ProjectSandbox.defaultImage` pins `ghcr.io/abkslm/naros-agent:26.07`, and
+`containers/nucleic-runner/Dockerfile` builds `FROM` it); `naros-runner` is still planned
+(NAROS.md §7.2 — it will fold in `containers/nucleic-runner`) — and the
 signed apt repository to Cloudflare R2.
 
 ## Layout