Fixed Clawpatch-reported release build, config validation, status, stop, setup parsing, log parsing, and proxy export edge cases.

Prevented proxy credentials from leaking through exposure reports and live verifier command arguments.

Preserved tailscale-exit route metadata when selector-driven export or recommendation adds routes.

Exposed the S02 runtime verifier through pnpm verify:s02-runtime and made it clean up started runtimes.