#2291 Unified startup Profile Gate and Layer 1 consolidation

[BryanHarrisScripts]

Closes #2291

Implements the approved startup/profile and verification convergence:

• one persistent Profile Gate for initialization and locked/passphrase states
• ordinary single-profile desktop launch resolves directly to the locked Human profile
• explicit Switch Profile still opens the chooser
• WebMCP captures deterministic initialization + locked profile evidence without browser credential entry
• startup/auth captures remain separate from the 30 authenticated standard surfaces
• Layer 1 ordinary selection is consolidated from 13 historical entries to three current-product owners
• historical issue tests remain available in manual mode

Merge only when the exact PR head is green.

[BryanHarrisScripts]

PlotPickle Development Run

State: WAITING
Issue: #2291
PR: #2293
Branch: issue-2291-startup-profile-layer1-convergence
Current head SHA: 9a1a95a
Current step: exact-head reverify after startup-order test precision repair
Changed-file summary: unified Profile Gate; one-profile direct locked launch; safe startup/profile WebMCP captures under existing Skin V1 verification family; split synthetic profile setup/login; canonical Layer 1 Skin/navigation suites; historical Layer 1 regressions moved to manual selection; verification ownership/convergence docs.
PR Gate: pending on current head
Product Gate: pending on current head
Current failure/blocker: none known. Prior Layer 1 failure was caused by a source-order assertion matching helper imports instead of awaited runtime calls.
Next action: verify this exact head; inspect only remaining failures and merge only when the same tested head is green.
Last meaningful action: tightened the canonical startup-order test to the actual awaited create/capture/authenticate call sites.