commissioning: the layer, the acceptance tests, the harness rule, the docs, and the bench drills

meta-forgefirm: the forgefirm-users init replays the account at boot;
sshd refuses root and empty passwords and runs only while the panel
turns it on; the release image keeps an empty root password for the
console; the console banner; avahi announces forgefirm.local; https in
libmicrohttpd and ulfius; the panel on 80 and 443; the license bundle on
the rootfs; release.sh checks the root policy on the built rootfs.

forgetest: the commission suites (commission, commission_dark,
commission_sheet: 23 cases); the runner turns cloud mode on with the
typed phrase for a test that declares it; the baseline's motor_lock is
0; the log-export test checks the bundle for the camera key; the record
helpers write bytes as given and join the daemon's paths as POSIX. The
stream harness gains rule 24: a hold verdict is held again after a
resume. Bench drills: lens_travel.py and lens_stop_accel.py.

Docs: BRINGUP carries the present state; CAMPAIGN-LOG carries the dated
record.

README.md

@@ -34,8 +34,9 @@ machine is idle:**
   EPIT), fed live by a local planner. M3/M4 dynamic laser power, coolant-flow
   verification, over-temp holds, and an operator button press to arm the laser
   for each job.
-* **Cloud mode**: The machine presents itself as a stock Glowforge to the
-  Glowforge web service, so the phone and web apps work as they always did.
+* **Cloud mode**: The machine signs in to the Glowforge web service with its
+  own identity, names its software as ForgeFIRM, and uses the service the way
+  a stock machine does, so the phone and web apps work as they always did.
   Optional, and off by default. GRBL mode jogs and cuts without it; the one
   GRBL-mode function that still reaches the Glowforge service is
   camera-referenced homing (below), until limit-switch homing lands.