Helper v1.0.9

One-time --start/--resume enrollment, --autostart persistence across reboots, and inline Docker/GPU-container readiness checks — the resident agent no longer requires a provider to see or paste a long-lived secret, or to keep a terminal window open.