git:20260909.e0c1497 to git:20260910.80a1a9a

1 added, 1 removed. Audit A to A.

- Cloud state is source of truth. Before work: `node state-worker/bin/sync.mjs pull`. After writes: `push`. Cloud agents: `GET /v1/profile`, `GET /v1/files/*`, download `resume.pdf` to workspace, path-based ATS upload, `POST /v1/ledgers/*` after success. Token in `~/Library/Application Support/job-application-agent-cloud/config.json` — never in git.

+ Cloud state is source of truth. Use the packaged `cloud`, profile, résumé, ledger, outcome, round, and attention commands; do not use legacy whole-file push/pull. Acquire and renew the v2 application-run lease, create an intent before sending, and confirm only after visible success. Tokens stay in owner-only host configuration and never in git.