Ship X7 paper/testnet RC

[vntrevx]

Summary

• Ship the NFI X7 paper/testnet RC surface with native strategy coverage, runtime health/control APIs, wallet and exchange capability flows, data lifecycle tools, update provenance, and operator UI improvements.
• Harden install/uninstall, Docker smoke, release wording, Pi4-oriented profiling, backup/restore, redaction, and public documentation.
• Add focused unit, integration, e2e, browser QA, and release-gate coverage for the new RC path.

Scope and Safety

• Paper/testnet RC only. This does not enable real-money live order execution by default.
• Local .omo/ plans, evidence, browser library binaries, and runtime artifacts are ignored and were not committed.
• Secret scan reviewed staged additions; matches were variable names, fixture values, or redacted/QA-only paths, not real credentials.

Validation

• git diff --cached --check
• bash scripts/quality_gate.sh --strict
  • ruff format --check .
  • ruff check .
  • basedpyright
  • pytest -q => 509 passed
• NFI_ENGINE_FINAL_SMOKE_HOST_PORT=18181 bash scripts/final_smoke.sh
  • Docker install ok
  • /api/v1/ping returned {"status":"pong"}
  • unauth dashboard returned 401
  • authenticated Home and dashboard snapshot validated
  • safe uninstall and purge uninstall completed
  • final smoke complete