feat(#93): implement agent spawn via federation

Implements FED-010: Agent Spawn via Federation feature that enables
spawning and managing Claude agents on remote federated Mosaic Stack
instances via COMMAND message type.

Features:
- Federation agent command types (spawn, status, kill)
- FederationAgentService for handling agent operations
- Integration with orchestrator's agent spawner/lifecycle services
- API endpoints for spawning, querying status, and killing agents
- Full command routing through federation COMMAND infrastructure
- Comprehensive test coverage (12/12 tests passing)

Architecture:
- Hub → Spoke: Spawn agents on remote instances
- Command flow: FederationController → FederationAgentService →
  CommandService → Remote Orchestrator
- Response handling: Remote orchestrator returns agent status/results
- Security: Connection validation, signature verification

Files created:
- apps/api/src/federation/types/federation-agent.types.ts
- apps/api/src/federation/federation-agent.service.ts
- apps/api/src/federation/federation-agent.service.spec.ts

Files modified:
- apps/api/src/federation/command.service.ts (agent command routing)
- apps/api/src/federation/federation.controller.ts (agent endpoints)
- apps/api/src/federation/federation.module.ts (service registration)
- apps/orchestrator/src/api/agents/agents.controller.ts (status endpoint)
- apps/orchestrator/src/api/agents/agents.module.ts (lifecycle integration)

Testing:
- 12/12 tests passing for FederationAgentService
- All command service tests passing
- TypeScript compilation successful
- Linting passed

Refs #93

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

apps/api/src/projects/projects.controller.spec.ts

@@ -62,11 +62,7 @@ describe("ProjectsController", () => {
       const result = await controller.create(createDto, mockWorkspaceId, mockUser);
 
       expect(result).toEqual(mockProject);
-      expect(service.create).toHaveBeenCalledWith(
-        mockWorkspaceId,
-        mockUserId,
-        createDto
-      );
+      expect(service.create).toHaveBeenCalledWith(mockWorkspaceId, mockUserId, createDto);
     });
 
     it("should pass undefined workspaceId to service (validation handled by guards)", async () => {
@@ -74,7 +70,9 @@ describe("ProjectsController", () => {
 
       await controller.create({ name: "Test" }, undefined as any, mockUser);
 
-      expect(mockProjectsService.create).toHaveBeenCalledWith(undefined, mockUserId, { name: "Test" });
+      expect(mockProjectsService.create).toHaveBeenCalledWith(undefined, mockUserId, {
+        name: "Test",
+      });
     });
   });
 
@@ -149,7 +147,12 @@ describe("ProjectsController", () => {
 
       await controller.update(mockProjectId, updateDto, undefined as any, mockUser);
 
-      expect(mockProjectsService.update).toHaveBeenCalledWith(mockProjectId, undefined, mockUserId, updateDto);
+      expect(mockProjectsService.update).toHaveBeenCalledWith(
+        mockProjectId,
+        undefined,
+        mockUserId,
+        updateDto
+      );
     });
   });
 
@@ -159,11 +162,7 @@ describe("ProjectsController", () => {
 
       await controller.remove(mockProjectId, mockWorkspaceId, mockUser);
 
-      expect(service.remove).toHaveBeenCalledWith(
-        mockProjectId,
-        mockWorkspaceId,
-        mockUserId
-      );
+      expect(service.remove).toHaveBeenCalledWith(mockProjectId, mockWorkspaceId, mockUserId);
     });
 
     it("should pass undefined workspaceId to service (validation handled by guards)", async () => {