feat(#93): implement agent spawn via federation

Implements FED-010: Agent Spawn via Federation feature that enables
spawning and managing Claude agents on remote federated Mosaic Stack
instances via COMMAND message type.

Features:
- Federation agent command types (spawn, status, kill)
- FederationAgentService for handling agent operations
- Integration with orchestrator's agent spawner/lifecycle services
- API endpoints for spawning, querying status, and killing agents
- Full command routing through federation COMMAND infrastructure
- Comprehensive test coverage (12/12 tests passing)

Architecture:
- Hub → Spoke: Spawn agents on remote instances
- Command flow: FederationController → FederationAgentService →
  CommandService → Remote Orchestrator
- Response handling: Remote orchestrator returns agent status/results
- Security: Connection validation, signature verification

Files created:
- apps/api/src/federation/types/federation-agent.types.ts
- apps/api/src/federation/federation-agent.service.ts
- apps/api/src/federation/federation-agent.service.spec.ts

Files modified:
- apps/api/src/federation/command.service.ts (agent command routing)
- apps/api/src/federation/federation.controller.ts (agent endpoints)
- apps/api/src/federation/federation.module.ts (service registration)
- apps/orchestrator/src/api/agents/agents.controller.ts (status endpoint)
- apps/orchestrator/src/api/agents/agents.module.ts (lifecycle integration)

Testing:
- 12/12 tests passing for FederationAgentService
- All command service tests passing
- TypeScript compilation successful
- Linting passed

Refs #93

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docs/1-getting-started/3-configuration/3-docker.md

@@ -93,6 +93,7 @@ OIDC_REDIRECT_URI=http://localhost:3001/auth/callback
 ```
 
 **Bootstrap Credentials:**
+
 - Username: `akadmin`
 - Password: Value of `AUTHENTIK_BOOTSTRAP_PASSWORD`
 
@@ -124,6 +125,7 @@ COMPOSE_PROFILES=full              # Enable all optional services
 ```
 
 Available profiles:
+
 - `authentik` - Authentik OIDC provider stack
 - `ollama` - Ollama LLM service
 - `full` - All optional services
@@ -257,7 +259,7 @@ services:
       replicas: 2
       resources:
         limits:
-          cpus: '1.0'
+          cpus: "1.0"
           memory: 1G
 
   web:
@@ -268,11 +270,12 @@ services:
       replicas: 2
       resources:
         limits:
-          cpus: '0.5'
+          cpus: "0.5"
           memory: 512M
 ```
 
 Deploy:
+
 ```bash
 docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d
 ```
@@ -311,9 +314,9 @@ services:
     deploy:
       resources:
         limits:
-          cpus: '1.0'
+          cpus: "1.0"
         reservations:
-          cpus: '0.25'
+          cpus: "0.25"
 ```
 
 ## Health Checks
@@ -325,10 +328,10 @@ All services include health checks. Adjust timing if needed:
 services:
   postgres:
     healthcheck:
-      interval: 30s      # Check every 30s
-      timeout: 10s       # Timeout after 10s
-      retries: 5         # Retry 5 times
-      start_period: 60s  # Wait 60s before first check
+      interval: 30s # Check every 30s
+      timeout: 10s # Timeout after 10s
+      retries: 5 # Retry 5 times
+      start_period: 60s # Wait 60s before first check
 ```
 
 ## Logging Configuration
@@ -349,6 +352,7 @@ services:
 ### Centralized Logging
 
 For production, consider:
+
 - Loki + Grafana
 - ELK Stack (Elasticsearch, Logstash, Kibana)
 - Fluentd
@@ -371,11 +375,13 @@ services:
 ### Container Won't Start
 
 Check logs:
+
 ```bash
 docker compose logs <service>
 ```
 
 Common issues:
+
 - Port conflict: Change port in `.env`
 - Missing environment variable: Check `.env` file
 - Health check failing: Increase `start_period`
@@ -383,6 +389,7 @@ Common issues:
 ### Network Issues
 
 Test connectivity between containers:
+
 ```bash
 # From API container to PostgreSQL
 docker compose exec api sh
@@ -392,6 +399,7 @@ nc -zv postgres 5432
 ### Volume Permission Issues
 
 Fix permissions:
+
 ```bash
 # PostgreSQL volume
 docker compose exec postgres chown -R postgres:postgres /var/lib/postgresql/data
@@ -400,6 +408,7 @@ docker compose exec postgres chown -R postgres:postgres /var/lib/postgresql/data
 ### Out of Disk Space
 
 Clean up:
+
 ```bash
 # Remove unused containers, networks, images
 docker system prune -a