[t94j0]

Summary

• Expand the Ludus provider for range provisioning, snapshot reuse, recovery, cleanup, and testing-mode network controls.
• Route Harbor agents to Ludus or an optional Docker sandbox while keeping task verifiers in Docker. Add Apollo callback readiness checks.
• Extend shared task validation and packaging for Ludus bindings and task-local verifiers, with tests and documentation.

Validation

• 449 local tests passed.