Switches Steel bootstrap injection to --cdp, preserves bare --auto-connect discovery, and rejects mixed attach flags. Bundles upstream daemon dist assets with vendored runtime, auto-sets AGENT_BROWSER_HOME for vendored execution, and adds runtime/cloud smoke validation scripts.