[AZ-640] Bootstrap Rust workspace, CI/Docker, observability scaffold

Lands the first task of the implementation epic AZ-626: a cargo workspace
with 14 crates (shared + autopilot binary + 12 component crates), a
multi-stage Dockerfile + dev/test compose stacks, a Woodpecker CI pipeline,
the on-airframe systemd unit with flight-gate wiring, three environment
TOML configs, and the canonical entity catalogue from data_model.md as
`shared::models`.

Per-AC verification (full detail in
_docs/03_implementation/batch_01_cycle1_report.md):

- AC-1 cargo check --workspace clean
- AC-2 cargo test --workspace passes; per-crate it_compiles() <0.01 s
- AC-6 cargo build/test --no-default-features clean; VlmClient default
       impl returns VlmAssessment::disabled()
- AC-9 tracing-subscriber emits JSON logs with ts/level/target/fields
- AC-10 runtime::ensure_state_directories creates mapobjects/, audit/,
        pending_pushes/ under storage.state_dir

Deferred to external infra (artifacts written, verification re-runs in CI
and in downstream tasks):
- AC-3 Woodpecker runner; CI yml in place
- AC-4 docker-compose mocks land with AZ-660/AZ-644/AZ-675
- AC-5 SITL conformance lands with AZ-641/AZ-648/AZ-652
- AC-7 aarch64 cross-compile via cargo-zigbuild stage
- AC-8 systemd unit (Linux + systemd host)

Layering invariants from module-layout.md hold: shared (L1) imports
nothing; Layer 2 actor crates import only shared; Layer 3 coordinators
(operator_bridge, mission_executor) import only their documented Layer 2
deps; Layer 4 (scan_controller) imports its documented Layer 2 + Layer 3
deps; the autopilot binary (L5) is the only consumer of every component.

cargo fmt --all --check + cargo clippy --all-targets -- -D warnings both
clean. Jira AZ-640 transitioned to In Progress at the start of this batch;
the matching In Testing transition follows this commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

Cargo.toml

@@ -0,0 +1,84 @@
+[workspace]
+resolver = "2"
+members = [
+    "crates/shared",
+    "crates/autopilot",
+    "crates/mavlink_layer",
+    "crates/mission_client",
+    "crates/frame_ingest",
+    "crates/detection_client",
+    "crates/movement_detector",
+    "crates/semantic_analyzer",
+    "crates/vlm_client",
+    "crates/scan_controller",
+    "crates/mapobjects_store",
+    "crates/gimbal_controller",
+    "crates/operator_bridge",
+    "crates/mission_executor",
+    "crates/telemetry_stream",
+]
+
+[workspace.package]
+edition = "2021"
+rust-version = "1.82"
+license = "Proprietary"
+publish = false
+authors = ["AZAION autopilot team"]
+
+[workspace.dependencies]
+# Async runtime
+tokio = { version = "1", features = ["rt-multi-thread", "macros", "sync", "time", "io-util", "net", "signal"] }
+
+# Foundational
+bytes = "1"
+anyhow = "1"
+thiserror = "1"
+async-trait = "0.1"
+once_cell = "1"
+
+# Serialisation
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+toml = "0.8"
+
+# IDs and time
+uuid = { version = "1", features = ["v4", "serde"] }
+chrono = { version = "0.4", default-features = false, features = ["clock", "serde"] }
+
+# Observability
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter", "json", "fmt"] }
+
+# CLI
+clap = { version = "4", features = ["derive", "env"] }
+
+# Health server
+axum = { version = "0.7", default-features = false, features = ["http1", "json", "tokio"] }
+tower = "0.5"
+hyper = { version = "1", features = ["server", "http1"] }
+
+# Workspace-internal
+shared = { path = "crates/shared" }
+mavlink_layer = { path = "crates/mavlink_layer" }
+mission_client = { path = "crates/mission_client" }
+frame_ingest = { path = "crates/frame_ingest" }
+detection_client = { path = "crates/detection_client" }
+movement_detector = { path = "crates/movement_detector" }
+semantic_analyzer = { path = "crates/semantic_analyzer" }
+vlm_client = { path = "crates/vlm_client" }
+scan_controller = { path = "crates/scan_controller" }
+mapobjects_store = { path = "crates/mapobjects_store" }
+gimbal_controller = { path = "crates/gimbal_controller" }
+operator_bridge = { path = "crates/operator_bridge" }
+mission_executor = { path = "crates/mission_executor" }
+telemetry_stream = { path = "crates/telemetry_stream" }
+
+[profile.release]
+lto = "thin"
+codegen-units = 1
+strip = "symbols"
+opt-level = 3
+
+[profile.dev]
+opt-level = 0
+debug = true