platform/app: restructure support bundle/blackbox mirror into device-type export/, status/, tasks/, livecd/

Replaces the flat export/ + techdump/ + system/ + systemd/ layout (two
same-named-but-different techdump/ dirs, disk reports duplicated between a
SAT run dir and techdump/) with one shared categorizeExportTree used by both
BuildSupportBundle and the blackbox USB mirror:

- export/{cpu,memory,storage,gpu,network,platform}/ — raw vendor-tool
  output grouped by device type, plus export/reanimator.json ready to POST
  to Reanimator's /ingest/hardware endpoint.
- status/ — computed diagnosis (component-status.json, runtime-health.*,
  and metrics.db, previously missing from every bundle entirely).
- tasks/ — bee's own task-run bookkeeping (bee-sat/, bee-bench/, task
  reports, service logs) where duplication with export/ is expected.
- livecd/{gui,host}/ — live-boot/kiosk-session-only diagnostics, kept out
  of the hardware-facing tree.

Drops the redundant disk-report mirror write in RunStorageAcceptancePack
and the now-dead syncDirectoryTree/removeMissingPaths; adds a size+mtime
skip in copyPath so the blackbox mirror doesn't rewrite unchanged files
every cycle. README.md rewritten to match.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

audit/internal/app/blackbox.go

@@ -8,7 +8,6 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"io/fs"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -582,10 +581,10 @@ func (w *blackboxWorker) syncCycle() error {
 	w.recordMountpoint(mountpoint, mountedByBee)
 
 	root := filepath.Join(mountpoint, w.runtime.bootFolder)
-	if err := os.MkdirAll(filepath.Join(root, "export"), 0755); err != nil {
+	if err := os.MkdirAll(root, 0755); err != nil {
 		return err
 	}
-	if err := syncDirectoryTree(w.runtime.exportDir, filepath.Join(root, "export")); err != nil {
+	if err := categorizeExportTree(w.runtime.exportDir, root); err != nil {
 		return err
 	}
 	// Same doc pair the support bundle ships at its root — a blackbox
@@ -625,18 +624,19 @@ func (w *blackboxWorker) recordMountpoint(mountpoint string, mountedByBee bool)
 }
 
 func (w *blackboxWorker) captureSnapshots(root string) error {
-	if err := captureCommandAtomic(filepath.Join(root, "systemd", "combined.journal.log"), "journalctl", "--no-pager", "--since", w.runtime.bootStarted.Format(time.RFC3339)); err != nil {
+	if err := captureCommandAtomic(filepath.Join(root, "tasks", "_services", "combined.journal.log"), "journalctl", "--no-pager", "--since", w.runtime.bootStarted.Format(time.RFC3339)); err != nil {
 		return err
 	}
 	for _, svc := range supportBundleServices {
-		if err := captureCommandAtomic(filepath.Join(root, "systemd", svc+".journal.log"), "journalctl", "--no-pager", "-u", svc, "--since", w.runtime.bootStarted.Format(time.RFC3339)); err != nil {
+		dir := filepath.Join(root, serviceBundleDir(svc))
+		if err := captureCommandAtomic(filepath.Join(dir, svc+".journal.log"), "journalctl", "--no-pager", "-u", svc, "--since", w.runtime.bootStarted.Format(time.RFC3339)); err != nil {
 			return err
 		}
-		if err := captureCommandAtomic(filepath.Join(root, "systemd", svc+".status.txt"), "systemctl", "status", svc, "--no-pager"); err != nil {
+		if err := captureCommandAtomic(filepath.Join(dir, svc+".status.txt"), "systemctl", "status", svc, "--no-pager"); err != nil {
 			return err
 		}
 	}
-	if err := captureCommandAtomic(filepath.Join(root, "system", "dmesg.txt"), "dmesg"); err != nil {
+	if err := captureCommandAtomic(filepath.Join(root, "livecd", "host", "dmesg.txt"), "dmesg"); err != nil {
 		return err
 	}
 	for _, item := range supportBundleOptionalFiles {
@@ -803,58 +803,6 @@ func writeBlackboxMarker(mountpoint string, marker BlackboxMarker) error {
 	return writeJSONAtomic(filepath.Join(mountpoint, blackboxMarkerName), marker)
 }
 
-func syncDirectoryTree(srcDir, dstDir string) error {
-	seen := make(map[string]struct{})
-	err := filepath.WalkDir(srcDir, func(path string, d fs.DirEntry, err error) error {
-		if err != nil {
-			return err
-		}
-		rel, err := filepath.Rel(srcDir, path)
-		if err != nil {
-			return err
-		}
-		rel = filepath.Clean(rel)
-		if rel == "." {
-			seen["."] = struct{}{}
-			return os.MkdirAll(dstDir, 0755)
-		}
-		seen[rel] = struct{}{}
-		dstPath := filepath.Join(dstDir, rel)
-		if d.IsDir() {
-			info, err := d.Info()
-			if err != nil {
-				return err
-			}
-			return os.MkdirAll(dstPath, info.Mode().Perm())
-		}
-		return copyFileIfChanged(path, dstPath)
-	})
-	if err != nil {
-		return err
-	}
-	return removeMissingPaths(dstDir, seen)
-}
-
-func removeMissingPaths(dstDir string, seen map[string]struct{}) error {
-	return filepath.WalkDir(dstDir, func(path string, d fs.DirEntry, err error) error {
-		if err != nil {
-			return err
-		}
-		rel, err := filepath.Rel(dstDir, path)
-		if err != nil {
-			return err
-		}
-		rel = filepath.Clean(rel)
-		if rel == "." {
-			return nil
-		}
-		if _, ok := seen[rel]; ok {
-			return nil
-		}
-		return os.RemoveAll(path)
-	})
-}
-
 func copyFileIfChanged(src, dst string) error {
 	info, err := os.Stat(src)
 	if err != nil {