[AZ-640] Bootstrap Rust workspace, CI/Docker, observability scaffold

Lands the first task of the implementation epic AZ-626: a cargo workspace
with 14 crates (shared + autopilot binary + 12 component crates), a
multi-stage Dockerfile + dev/test compose stacks, a Woodpecker CI pipeline,
the on-airframe systemd unit with flight-gate wiring, three environment
TOML configs, and the canonical entity catalogue from data_model.md as
`shared::models`.

Per-AC verification (full detail in
_docs/03_implementation/batch_01_cycle1_report.md):

- AC-1 cargo check --workspace clean
- AC-2 cargo test --workspace passes; per-crate it_compiles() <0.01 s
- AC-6 cargo build/test --no-default-features clean; VlmClient default
       impl returns VlmAssessment::disabled()
- AC-9 tracing-subscriber emits JSON logs with ts/level/target/fields
- AC-10 runtime::ensure_state_directories creates mapobjects/, audit/,
        pending_pushes/ under storage.state_dir

Deferred to external infra (artifacts written, verification re-runs in CI
and in downstream tasks):
- AC-3 Woodpecker runner; CI yml in place
- AC-4 docker-compose mocks land with AZ-660/AZ-644/AZ-675
- AC-5 SITL conformance lands with AZ-641/AZ-648/AZ-652
- AC-7 aarch64 cross-compile via cargo-zigbuild stage
- AC-8 systemd unit (Linux + systemd host)

Layering invariants from module-layout.md hold: shared (L1) imports
nothing; Layer 2 actor crates import only shared; Layer 3 coordinators
(operator_bridge, mission_executor) import only their documented Layer 2
deps; Layer 4 (scan_controller) imports its documented Layer 2 + Layer 3
deps; the autopilot binary (L5) is the only consumer of every component.

cargo fmt --all --check + cargo clippy --all-targets -- -D warnings both
clean. Jira AZ-640 transitioned to In Progress at the start of this batch;
the matching In Testing transition follows this commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

crates/vlm_client/src/lib.rs

@@ -0,0 +1,72 @@
+//! `vlm_client` — optional Tier 3 NanoLLM/VILA Visual-Language-Model client.
+//!
+//! Default impl (`feature = "vlm"` OFF) returns `VlmAssessment::disabled()`.
+//! Real IPC path lands in:
+//! - AZ-672 `vlm_client_provider_trait`
+//! - AZ-673 `vlm_client_nanollm_ipc`
+//! - AZ-674 `vlm_client_schema_and_model_version`
+
+use async_trait::async_trait;
+
+use shared::contracts::VlmProvider;
+use shared::error::Result;
+use shared::health::ComponentHealth;
+use shared::models::vlm::VlmAssessment;
+
+const NAME: &str = "vlm_client";
+
+#[derive(Debug, Clone, Default)]
+pub struct VlmClient {
+    enabled: bool,
+}
+
+impl VlmClient {
+    /// Construct the no-op `VlmClient`. Returns `VlmAssessment::disabled()`
+    /// from every `assess()` call.
+    pub fn with_default() -> Self {
+        Self { enabled: false }
+    }
+
+    #[cfg(feature = "vlm")]
+    pub fn enabled() -> Self {
+        Self { enabled: true }
+    }
+
+    pub fn health(&self) -> ComponentHealth {
+        if self.enabled {
+            ComponentHealth::green(NAME)
+        } else {
+            ComponentHealth::disabled(NAME)
+        }
+    }
+}
+
+#[async_trait]
+impl VlmProvider for VlmClient {
+    async fn assess(&self, _roi: Vec<u8>, _prompt: String) -> Result<VlmAssessment> {
+        // Disabled path always returns the documented no-op assessment.
+        // The real path lands in AZ-673.
+        Ok(VlmAssessment::disabled())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[tokio::test]
+    async fn default_impl_returns_disabled_assessment() {
+        // Arrange
+        let c = VlmClient::with_default();
+
+        // Act
+        let result = c
+            .assess(Vec::new(), String::new())
+            .await
+            .expect("disabled path is infallible");
+
+        // Assert
+        assert_eq!(result.status, shared::models::vlm::VlmStatus::Disabled);
+        assert_eq!(result.label, shared::models::vlm::VlmLabel::Inconclusive);
+    }
+}