Implement audit enrichments, TUI workflows, and production ISO scaffold

iso/builder/genapkovl-bee_debug.sh

@@ -89,6 +89,11 @@ if [ -d "$OVERLAY/root" ]; then
     chmod 600 "$tmp/root/.ssh/authorized_keys" 2>/dev/null || true
 fi
 
+if [ -d "$OVERLAY/lib" ]; then
+    mkdir -p "$tmp/lib"
+    cp -r "$OVERLAY/lib/." "$tmp/lib/"
+fi
+
 mkdir -p "$tmp/etc/dropbear" "$tmp/etc/conf.d"
 # -R: auto-generate host keys if missing
 # no dependency on networking service — bee-network handles DHCP independently
@@ -97,4 +102,4 @@ DROPBEAR_OPTS="-R -B"
 EOF
 
 
-tar -c -C "$tmp" etc usr root 2>/dev/null | gzip -9n > "$HOSTNAME.apkovl.tar.gz"
+tar -c -C "$tmp" etc usr root lib 2>/dev/null | gzip -9n > "$HOSTNAME.apkovl.tar.gz"