[AZ-640] Bootstrap Rust workspace, CI/Docker, observability scaffold

Lands the first task of the implementation epic AZ-626: a cargo workspace
with 14 crates (shared + autopilot binary + 12 component crates), a
multi-stage Dockerfile + dev/test compose stacks, a Woodpecker CI pipeline,
the on-airframe systemd unit with flight-gate wiring, three environment
TOML configs, and the canonical entity catalogue from data_model.md as
`shared::models`.

Per-AC verification (full detail in
_docs/03_implementation/batch_01_cycle1_report.md):

- AC-1 cargo check --workspace clean
- AC-2 cargo test --workspace passes; per-crate it_compiles() <0.01 s
- AC-6 cargo build/test --no-default-features clean; VlmClient default
       impl returns VlmAssessment::disabled()
- AC-9 tracing-subscriber emits JSON logs with ts/level/target/fields
- AC-10 runtime::ensure_state_directories creates mapobjects/, audit/,
        pending_pushes/ under storage.state_dir

Deferred to external infra (artifacts written, verification re-runs in CI
and in downstream tasks):
- AC-3 Woodpecker runner; CI yml in place
- AC-4 docker-compose mocks land with AZ-660/AZ-644/AZ-675
- AC-5 SITL conformance lands with AZ-641/AZ-648/AZ-652
- AC-7 aarch64 cross-compile via cargo-zigbuild stage
- AC-8 systemd unit (Linux + systemd host)

Layering invariants from module-layout.md hold: shared (L1) imports
nothing; Layer 2 actor crates import only shared; Layer 3 coordinators
(operator_bridge, mission_executor) import only their documented Layer 2
deps; Layer 4 (scan_controller) imports its documented Layer 2 + Layer 3
deps; the autopilot binary (L5) is the only consumer of every component.

cargo fmt --all --check + cargo clippy --all-targets -- -D warnings both
clean. Jira AZ-640 transitioned to In Progress at the start of this batch;
the matching In Testing transition follows this commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.test.yml

@@ -0,0 +1,58 @@
+# Blackbox / SITL compose stack: autopilot + ArduPilot SITL + mock detections +
+# replay RTSP source. Drives the workspace e2e tests under tests/e2e/.
+#
+# The real SITL conformance gate (AC-5) requires images that are still being
+# built out in per-component tasks; today's stack is a wired skeleton so
+# `docker compose -f docker-compose.test.yml config` validates and downstream
+# tasks (AZ-641 mavlink_transport, AZ-648 mission_executor) can plug in.
+#
+# Reference: _docs/02_document/deployment/ci_cd_pipeline.md §5.
+
+services:
+  autopilot:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: azaion/autopilot:test
+    environment:
+      AUTOPILOT_CONFIG: /etc/azaion/autopilot/config.toml
+      RUST_LOG: info
+      AUTOPILOT_HEALTH_BIND: 0.0.0.0:8080
+    volumes:
+      - ./config/autopilot.staging.toml:/etc/azaion/autopilot/config.toml:ro
+      - autopilot-state-test:/var/lib/autopilot
+    depends_on:
+      - ardupilot-sitl
+      - mock-detections
+      - mock-missions
+      - replay-rtsp
+    ports:
+      - "8080:8080"
+
+  ardupilot-sitl:
+    image: ardupilot/sitl:latest
+    # Placeholder. SITL conformance test (AZ-641, AZ-648, AZ-652) wires real
+    # mission scripts. The image is pinned in those tasks.
+    ports:
+      - "14550:14550/udp"
+
+  mock-detections:
+    image: nginx:alpine
+    # Replaced by deterministic detections fixture service in AZ-661.
+    ports:
+      - "50051:80"
+
+  mock-missions:
+    image: nginx:alpine
+    # Replaced by mock missions HTTPS service in AZ-644.
+    ports:
+      - "8443:80"
+
+  replay-rtsp:
+    image: nginx:alpine
+    # Replaced by an `mediamtx` / `ffmpeg`-driven looper in AZ-657.
+    ports:
+      - "8554:80"
+
+volumes:
+  autopilot-state-test: {}