Epic: Smithers durable-workflow migration

[RonTuretzky]

Tracking issue for migrating labor.fun's multi-step agent flows onto a durable Smithers sidecar, designed so local inference is a one-line change.

Initial scaffold + design: #106 (merged-pending) — orchestration/ sidecar, ContainerAgent bridge, model router/escalation, three pilot workflows, docs/SMITHERS-ORCHESTRATION.md.

Sequencing

1. Enablement (blocks all): Smithers: wire sidecar runtime → runContainerAgent + remote env (blocks all) #107 — runtime binding + remote env (Bun, systemd, state dir).
2. Pilot A (validate first, low risk): Smithers: meeting-task approval + calendar scheduling (productionize scaffold) #109 — transcript processing.
3. Approval bridge: Smithers: expense approval — Safe{Wallet} multisig payout (BREAD on Gnosis), agent as proposer #108 — expense safe-API integration (Pattern B).
4. Calendar scheduling: Smithers: transcript processing pilot (Pattern A) — validate on remote #110 — meeting-task + free/busy + timezones (depends on Smithers: expense approval — Safe{Wallet} multisig payout (BREAD on Gnosis), agent as proposer #108).
5. Remaining flows: Smithers: migrate remaining multi-step flows (weekly-agenda, peer-review, SD, PM) #111 — weekly-agenda, peer-review, SD, PM.
6. Durability extras: Smithers: checkpoint GitHub/Discord sync reconcile passes #112 — GitHub/Discord sync checkpointing.
7. Local inference: Smithers: local-inference seam — per-tier baseUrl routing #113 — per-tier baseUrl routing (the payoff).

Principles

• Smithers runs containers, not models — every step goes through runContainerAgent to keep sandbox/proxy/RBAC/memory.
• Approval authority stays on the privileged side; workflows only sequence gates.
• Additive only in src/; orchestration/ is outside the build.