Sub-ticket of OPS-36 agent-health-watch.{service,timer}: 5min health check (process liveness, model, ARO membership, settings.json drift) + email/push on drift; v1 whey only · agent-ops