feat(cursor): promote cursor-agent to verified crewmate harness

[mwaddo]

Summary

• Ship and scout cursor spawns source crew-router auth through a bounded sh -c wrapper, launch with -f (Run Everything), accept the one-time workspace trust dialog during spawn, and deliver the brief through durable fm-send rather than a positional prompt.
• Secondmate cursor launches keep --trust for project-scope hooks and still carry the brief positionally.
• Harden auth preflight (fail-closed credential sourcing, quiet source errors) and extend spawn dispatch tests for the new launch shape.

Test plan

• tests/fm-spawn-dispatch-profile.test.sh
• no-mistakes review, test, document, and lint steps passed locally (push blocked on upstream write permission; branch pushed to fork)

📦 Squash merge message

feat(cursor): promote cursor-agent to verified crewmate harness

Ship and scout cursor spawns source crew-router auth through a bounded sh -c
wrapper, launch with -f, accept the one-time workspace trust dialog during spawn,
and deliver the brief through durable fm-send rather than a positional prompt.
Secondmate cursor launches keep --trust for project-scope hooks and still carry
the brief positionally. Harden auth preflight with fail-closed credential sourcing
and quiet source errors, and extend spawn dispatch tests for the new launch shape.

🔎 Gate provenance

Gate variant: /no-mistakes (local pipeline; branch pushed via fork)

Step	Model	Outcome
implement + fix	Composer 2.5	completed
review (Greptile)	Greptile	pass (5/5 confidence)
test	local / no-mistakes	passed
lint	local / no-mistakes	passed
push	fork (mwaddo/firstmate)	upstream write denied (403); branch on fork

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge with no concrete changed-code defect identified.

The Cursor launch now fails closed on unavailable credentials, preserves the hook-enabled secondmate path, waits for verified interactive readiness, and durably records the ship or scout brief before reporting success.

_{Reviews (1): Last reviewed commit: "no-mistakes(document): Document Cursor a..." | Re-trigger Greptile}