refactor: JobEngine cleanup + crypto compose refactor + sprint plans + timeline merge prep

- Remove zombie JobEngine WebService (no container runs it)
- Remove dangling STELLAOPS_JOBENGINE_URL, replace with RELEASE_ORCHESTRATOR_URL
- Update Timeline audit paths to release-orchestrator
- Extract smremote to docker-compose.crypto-provider.smremote.yml
- Rename crypto compose files for consistent naming
- Add crypto provider health probe API (CP-001) + tenant preferences (CP-002)
- Create sprint plans: crypto picker, VulnExplorer merge, scheduler plugins
- Timeline merge prep: ingestion worker relocated to infrastructure lib

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

devops/docker/nginx-console.conf

@@ -98,7 +98,7 @@ server {
     # Policy gateway (strips /policy/ prefix, regex avoids colliding with
     # Angular /policy/exceptions, /policy/packs SPA routes)
     location ~ ^/policy/(api|v[0-9]+)/ {
-        set $policy_upstream http://policy-gateway.stella-ops.local;
+        set $policy_upstream http://policy-engine.stella-ops.local;
         rewrite ^/policy/(.*)$ /$1 break;
         proxy_pass $policy_upstream;
         proxy_set_header Host $host;
@@ -208,7 +208,7 @@ server {
         sub_filter '"http://platform.stella-ops.local"' '"/platform"';
         sub_filter '"http://authority.stella-ops.local"' '"/authority"';
         sub_filter '"http://scanner.stella-ops.local"' '"/scanner"';
-        sub_filter '"http://policy-gateway.stella-ops.local"' '"/policy"';
+        sub_filter '"http://policy-engine.stella-ops.local"' '"/policy"';
         sub_filter '"http://concelier.stella-ops.local"' '"/concelier"';
         sub_filter '"http://attestor.stella-ops.local"' '"/attestor"';
         sub_filter '"http://notify.stella-ops.local"' '"/notify"';