Add durable OpenPI Antioch live validation

[timothy-le7]

Summary

• add a local-only Pi 0.5 DROID container harness for a saved Antioch simulation result
• enforce scoped model-terms acceptance, pinned source, read-only runtime weights, durable health checks, and label-scoped cleanup
• validate finite action chunks, jaw motion, arm motion, and stable completion while emitting sanitized evidence
• document the independent control-plane and simulator-to-policy network paths

Validation

• full test suite: 11462 passed, 37 skipped, 12 deselected, 1 xpassed
• smoke suite: 104 passed
• guardrails: 2206 passed
• focused regression: 16 passed, 1 opt-in live test skipped
• Ruff passed
• credential health preflight passed for all configured backends
• confidentiality and gitleaks scans passed
• fresh private live validation produced a passed, viewable result with three finite action chunks and measured arm/jaw motion

Baseline note

The generated CLI documentation check reports an existing LeIsaac reference drift. This change does not modify CLI registration or generated CLI documentation; the commit range contains none of those files.