C2: console shell — menu/sub-menu framework + profile switching (4 deployments)

[eaitbrahim]

Per the PRD §5 C2: the menu/sub-menu navigation over the current dashboard (which stays the landing screen), and the Profile menu switching paper-forward | paper-hourly | paper-equities | live — explicit, guarded for live, with the active config/db pair visible in every screen's header. Acceptance: every PRD §2 inventory section reachable; profile switching rebinds config/db everywhere in one action (pinned).

[eaitbrahim]

Scope note (2026-08-19, operator addition): the Profile area also hosts the Venues browser — installed adapters + capabilities rendered from the C7 brokers service (#394), selected adapter highlighted, active deployment binding shown. The browser lands here if C2 follows C7, or as a follow-up here if C2 lands first; either way it renders the service, never its own registry logic.

[eaitbrahim]

Scope addition (2026-08-19, operator): the session banner (PRD O9). The per-screen header IS the session banner: active profile (config+db) + market session state (B1's SessionState: OPEN / CLOSED / CLOCK UNAVAILABLE) + the venue market clock — current venue time and, for session-bound venues, NEXT OPEN / NEXT CLOSE (requires extending the port's clock read to carry them; Alpaca's /v2/clock already provides both) — or an explicit '24/7' for always-open venues. Sourced from the recorded-session state and the market_clock() service only; stale/absent renders CLOCK UNAVAILABLE fail-loud (same semantics as fetch --check); no TUI-side calendar logic. Applies to live AND paper profiles. Success criterion 8 pins it.

[eaitbrahim]

C2 complete — merged in PR #401 (adversarially reviewed: approved; 2 majors-class minors + 5 nits fixed pre-merge: banner-aware scroll clamps on all five overlays, dead defused field removed, LIVE-switch toast now alert-styled, one-shot broker discovery per binding, profile-mode m-key, 80-column budget, activity paging).

The console shell: a pure keel/commands/console.py (menu model, the four wrapper-pinned profile pairs, banner builders) + three new run_live modes (menu, profile, placeholder) on the existing curses dashboard — which remains the landing screen; callers passing no console binding get the pre-C2 dashboard byte-for-byte. Profile switching rebinds config+db through the CLI's own loaders (pairs travel together, wrong pairs refused, LIVE guarded by an explicit confirm and an unmistakable banner). The session banner (O9): port gained MarketSchedule(state, next_open, next_close) + Broker.market_schedule() with a port-shipped default for 24/7 venues (Alpaca parses /v2/clock's next_open/next_close); cycles record the schedule venue-namespaced; every screen's header shows profile + session state + clock, CLOCK UNAVAILABLE fail-loud. Venues browser deferred to C7 per the PRD's either-order note.

Gates: 3342 passed, 3 skipped; ruff/mypy clean. (Note: the post-merge Code Quality push-run failure is a pre-existing infra issue on every main commit today — filed as #402, not this PR.)