LXC deployment: live config for agentd-01, oregon rollback config, win10 helpers and board protocol in the repo

- config/agentd.yaml is now the agentd-01 live config (state /var/lib/plane-agentd, logs /var/log/plane-agentd);
  config/agentd.oregon.yaml keeps the oregon dispatcher settings for rollback (cron/agentd-tick.sh uses it).
- cron/agentd-tick-lxc.sh: the LXC cron entry.
- tools/win10/: win10-ps.sh / win10-put.sh (vault client dir via AGENT_ACCESS_HOME); relative helpers_dir
  resolves against the repo, default tools/win10.
- config/protocols/gwent-board-protocol.md: copy of gwent/design/board-protocol.md used in prompts.
- agentd.log_dir (default state_dir).
- smoke --watch: create the item and wait for the scheduled dispatcher instead of ticking locally.

agentd/config.py

@@ -155,8 +155,18 @@ class Config:
         return p if p.is_absolute() else ROOT / p
 
     def helpers_dir(self, terminal):
-        d = self.terminals[terminal].get("helpers_dir") or self.agentd.get("helpers_dir") or str(ROOT / "tools")
-        return Path(os.path.expanduser(d))
+        d = self.terminals[terminal].get("helpers_dir") or self.agentd.get("helpers_dir") or "tools/win10"
+        p = Path(os.path.expanduser(d))
+        return p if p.is_absolute() else ROOT / p
+
+    @property
+    def log_dir(self):
+        """agentd.log lives here (default: state_dir)."""
+        d = self.agentd.get("log_dir")
+        if not d:
+            return self.state_dir
+        p = Path(os.path.expanduser(d))
+        return p if p.is_absolute() else ROOT / p
 
     def token_env(self, terminal):
         """Environment variable that carries the terminal's Plane token (== the Vault key name)."""