fix(app): capture PCIe link / AER diagnostics at boot, not just on demand

pcie-nvidia-link.txt, pcie-nvidia-link-under-load.txt, and
kernel-aer-nvidia.txt only ever lived in supportBundleCommands, which
exclusively runs inside the on-demand "Download Support Bundle" web UI
action. The blackbox USB auto-sync worker never calls that function -
it only mirrors whatever CaptureTechnicalDump already wrote into the
live export tree at boot. So these three files were structurally
unreachable from a blackbox pull no matter how fresh the build was;
earlier analysis of a real blackbox misattributed their absence to
build/version drift instead.

Move the underlying scripts into shared exported constants
(platform.PCIeNvidiaLinkScript, PCIeNvidiaLinkUnderLoadScript,
KernelAERNvidiaScript) and add them to techDumpNvidiaCommands, so
CaptureTechnicalDump captures all three once at boot (bee-audit is
oneshot, so the ~8s bee-gpu-burn cost for the under-load sample is a
one-time boot cost, not a per-sync-cycle one) alongside the existing
nvidia-smi-* dumps. supportBundleCommands still re-runs the same
scripts on demand for a fresher sample - that's intentional, not a
duplicate to clean up.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

audit/internal/app/support_bundle.go

@@ -98,13 +98,7 @@ else
   echo "dmesg not found"
 fi
 `}},
-	{name: "export/gpu/kernel-aer-nvidia.txt", cmd: []string{"sh", "-c", `
-if command -v dmesg >/dev/null 2>&1; then
-  dmesg | grep -iE 'AER|NVRM|Xid|pcieport|nvidia' || echo "no AER/NVRM/Xid kernel messages found"
-else
-  echo "dmesg not found"
-fi
-`}},
+	{name: "export/gpu/kernel-aer-nvidia.txt", cmd: []string{"sh", "-c", platform.KernelAERNvidiaScript}},
 	{name: "livecd/gui/loginctl-sessions.txt", cmd: []string{"sh", "-c", `
 if command -v loginctl >/dev/null 2>&1; then
   loginctl list-sessions 2>&1 || true
@@ -310,22 +304,11 @@ if [ "$found" -eq 0 ]; then
   echo "no NVIDIA PCI devices found"
 fi
 `}},
-	{name: "export/gpu/pcie-nvidia-link.txt", cmd: []string{"sh", "-c", `
-for d in /sys/bus/pci/devices/*/; do
-  vendor=$(cat "$d/vendor" 2>/dev/null)
-	  [ "$vendor" = "0x10de" ] || continue
-	  class=$(cat "$d/class" 2>/dev/null)
-	  case "$class" in
-	    0x030000|0x030200) ;;
-	    *) continue ;;
-	  esac
-	  dev=$(basename "$d")
-  echo "=== $dev ==="
-  for f in current_link_speed current_link_width max_link_speed max_link_width; do
-    printf "  %-22s %s\n" "$f" "$(cat "$d/$f" 2>/dev/null)"
-  done
-done
-`}},
+	// Also captured once at boot by platform.CaptureTechnicalDump (which the
+	// blackbox mirror picks up automatically); re-run here so an on-demand
+	// support bundle gets a fresh sample instead of a possibly-stale boot
+	// one. See bible-local/decisions/2026-08-24-pcie-gpu-gen1-idle-warning.md.
+	{name: "export/gpu/pcie-nvidia-link.txt", cmd: []string{"sh", "-c", platform.PCIeNvidiaLinkScript}},
 	// A Gen1-vs-Gen4 link speed reading at idle is ambiguous: NVIDIA drivers
 	// deliberately downclock PCIe in low power states and re-train to full
 	// speed under load, so pcie-nvidia-link.txt alone can't tell a real
@@ -333,31 +316,7 @@ done
 	// sysfs attributes while bee-gpu-burn is actively loading the GPUs — if
 	// the link comes up here, the idle Gen1 reading above was power saving,
 	// not a fault.
-	{name: "export/gpu/pcie-nvidia-link-under-load.txt", cmd: []string{"sh", "-c", `
-if ! command -v bee-gpu-burn >/dev/null 2>&1; then
-  echo "bee-gpu-burn not found; cannot sample PCIe link speed under load"
-  exit 0
-fi
-bee-gpu-burn --seconds 8 --size-mb 64 >/tmp/bee-pcie-load-burn.log 2>&1 &
-burn_pid=$!
-sleep 3
-for d in /sys/bus/pci/devices/*/; do
-  vendor=$(cat "$d/vendor" 2>/dev/null)
-  [ "$vendor" = "0x10de" ] || continue
-  class=$(cat "$d/class" 2>/dev/null)
-  case "$class" in
-    0x030000|0x030200) ;;
-    *) continue ;;
-  esac
-  dev=$(basename "$d")
-  echo "=== $dev ==="
-  for f in current_link_speed current_link_width max_link_speed max_link_width; do
-    printf "  %-22s %s\n" "$f" "$(cat "$d/$f" 2>/dev/null)"
-  done
-done
-wait "$burn_pid" 2>/dev/null || true
-rm -f /tmp/bee-pcie-load-burn.log
-`}},
+	{name: "export/gpu/pcie-nvidia-link-under-load.txt", cmd: []string{"sh", "-c", platform.PCIeNvidiaLinkUnderLoadScript}},
 	{name: "export/gpu/pcie-aer-sysfs.txt", cmd: []string{"sh", "-c", `
 found=0
 for dev in /sys/bus/pci/devices/*; do