[AZ-640] Bootstrap Rust workspace, CI/Docker, observability scaffold

Lands the first task of the implementation epic AZ-626: a cargo workspace
with 14 crates (shared + autopilot binary + 12 component crates), a
multi-stage Dockerfile + dev/test compose stacks, a Woodpecker CI pipeline,
the on-airframe systemd unit with flight-gate wiring, three environment
TOML configs, and the canonical entity catalogue from data_model.md as
`shared::models`.

Per-AC verification (full detail in
_docs/03_implementation/batch_01_cycle1_report.md):

- AC-1 cargo check --workspace clean
- AC-2 cargo test --workspace passes; per-crate it_compiles() <0.01 s
- AC-6 cargo build/test --no-default-features clean; VlmClient default
       impl returns VlmAssessment::disabled()
- AC-9 tracing-subscriber emits JSON logs with ts/level/target/fields
- AC-10 runtime::ensure_state_directories creates mapobjects/, audit/,
        pending_pushes/ under storage.state_dir

Deferred to external infra (artifacts written, verification re-runs in CI
and in downstream tasks):
- AC-3 Woodpecker runner; CI yml in place
- AC-4 docker-compose mocks land with AZ-660/AZ-644/AZ-675
- AC-5 SITL conformance lands with AZ-641/AZ-648/AZ-652
- AC-7 aarch64 cross-compile via cargo-zigbuild stage
- AC-8 systemd unit (Linux + systemd host)

Layering invariants from module-layout.md hold: shared (L1) imports
nothing; Layer 2 actor crates import only shared; Layer 3 coordinators
(operator_bridge, mission_executor) import only their documented Layer 2
deps; Layer 4 (scan_controller) imports its documented Layer 2 + Layer 3
deps; the autopilot binary (L5) is the only consumer of every component.

cargo fmt --all --check + cargo clippy --all-targets -- -D warnings both
clean. Jira AZ-640 transitioned to In Progress at the start of this batch;
the matching In Testing transition follows this commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

.woodpecker.yml

@@ -0,0 +1,90 @@
+# Woodpecker CI pipeline.
+# Stages run sequentially per _docs/02_document/deployment/ci_cd_pipeline.md §2.
+# A failed stage stops the pipeline.
+
+clone:
+  git:
+    image: woodpeckerci/plugin-git
+
+steps:
+  fetch:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo fetch --locked
+
+  lint:
+    image: rust:1.82-bookworm
+    commands:
+      - rustup component add rustfmt clippy
+      - cargo fmt --all -- --check
+      - cargo clippy --all-targets --all-features -- -D warnings
+
+  unit-test:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo test --workspace --all-features --locked
+
+  build-arm64:
+    image: rust:1.82-bookworm
+    commands:
+      - rustup target add aarch64-unknown-linux-gnu
+      - cargo install --locked cargo-zigbuild
+      - apt-get update && apt-get install -y --no-install-recommends zig
+      - cargo zigbuild --release --target aarch64-unknown-linux-gnu --workspace --locked
+
+  build-no-vlm:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo build --workspace --no-default-features --locked
+      - cargo test --workspace --no-default-features --locked
+
+  integration-test:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo test --workspace --all-features --locked -- --test-threads=1
+    when:
+      event: [push, pull_request]
+
+  sitl-conformance:
+    image: docker:24-cli
+    commands:
+      - docker compose -f docker-compose.test.yml up --abort-on-container-exit --exit-code-from autopilot
+    when:
+      event: [push, pull_request]
+
+  security-scan:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo install --locked cargo-audit cargo-deny
+      - cargo audit
+      - cargo deny check
+
+  package:
+    image: docker:24-cli
+    commands:
+      - docker build -t azaion/autopilot:$${CI_COMMIT_BRANCH}-arm64 .
+    when:
+      branch: [dev, main]
+      event: push
+
+  sign:
+    image: cosign:latest
+    commands:
+      - cosign sign --yes azaion/autopilot:$${CI_COMMIT_TAG}-arm64
+    when:
+      event: tag
+
+  publish:
+    image: docker:24-cli
+    commands:
+      - docker push azaion/autopilot:$${CI_COMMIT_TAG}-arm64
+    when:
+      event: tag
+
+  # Benchmark gate is opt-in (manual / nightly) per ci_cd_pipeline.md §6.
+  benchmark-gate:
+    image: rust:1.82-bookworm
+    commands:
+      - cargo bench --workspace -- --save-baseline ci
+    when:
+      event: cron