feat: Phase 1 FDA host-operator Role and railiance01 pilot (WP-0009 T02–T07)

Lock DEC-FDA-001 working defaults; add roles/host-operator package with
OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001
with bound agent, vault, ramp checklists, and Kai quote/ledger.

roles/host-operator/memory-template.md

@@ -0,0 +1,62 @@
+---
+agent: host-operator
+engagement_id: "<set on init>"
+project: "<engagement or client slug>"
+last_updated: "<ISO date>"
+session_count: 0
+confidentiality: client_owned
+---
+
+# Host Operator Memory
+
+## Engagement Charter
+
+<!-- duty, change windows, escalation contacts, out-of-scope -->
+
+## Project Context
+
+<!-- Client, domain, why this engagement exists -->
+
+## Host Profiles
+
+<!-- hostname | role | typical load | services | last review -->
+
+## OS & Patch State
+
+<!-- distro | kernel | last update pass | deferred packages | reboot needed? -->
+
+## Security Posture
+
+<!-- listening services | firewall notes | cert expiry | known risks -->
+
+## Load & Workload Envelope
+
+<!-- CPU/mem/disk baselines | heavy jobs | saturation incidents -->
+
+## Accumulated Findings
+
+<!-- Patterns, recurring issues, key decisions -->
+
+## What Worked
+
+<!-- Approaches that produced good results -->
+
+## Watch Points
+
+<!-- Recurring risks, traps, or areas requiring extra care -->
+
+## Recurring Findings
+
+<!-- pattern · first seen · frequency -->
+
+## Cleared Issues
+
+<!-- what was done · when · outcome -->
+
+## Open Threads
+
+<!-- Things noticed but not yet acted on -->
+
+## Session Log
+
+<!-- YYYY-MM-DD · host(s) · key finding · outcome -->