MSG-207 lezama host: wire idle over-budget self-compact actuator

Split off MSG-207 per its own 2026-08-09 note (wi-cli-venus): lezama is GCABA hardware, not monitor-context-cc's lane. Ask: port tick.py's actuator (idle+over-budget send-keys /compact into the agent's own tmux pane) to lezama, the way venus already runs it (context-venus-tick.{service,timer}) and whey has open as its own half (MSG-207 itself). Root design + acceptance test are already proven on whey/venus - gates on live statusline occupancy, never the stale-transcript estimate (OPS-11's root cause). Assign/scope is bin-lezama-cc's + nw-lezama-cc's call; idle-checked nw-lezama-cc before filing (live on hub, last_seen 6s).