build(snitchwatch): re-pin snitchwatch to c088132 for the r9 candidate

[bearyjd]

Stacked on #87. Re-pins Snitchwatch for the r9 candidate. Together with #86 (Wants= on the bridge gRPC socket) and #87 (the 44-file blocklist daemon patch), this is the image the r9 VM gate tests.

Summary

• Snitchwatch b224adf → c088132 (post-merge CI green). This covers 16 commits, including:
  • blocklist enforcement and the packaged bridge-fetch rule (feat: add Snitchwatch bridge 0.1.1 system image candidate #76, fix(snitchwatch): refuse rule files with invalid names in the daemon loader #91);
  • SQLite store hardening (build(snitchwatch): re-pin snitchwatch to 98aad35 for the r11 candidate #90);
  • rule import/export (feat(snitchwatch): prompt-slot options in the daemon patch (DropWhileAsking, default-action events) #89);
  • pause answering waiting prompts once (fix(snitchwatch): keep a rule in the daemon when deleting its file fails #93);
  • a test fix (ci: time-limit the signature and provenance verify steps #95).
• Snitchwatch's stage.sh now installs one opensnitchd rule, /etc/opensnitchd/rules/000-snitchwatch-bridge-fetch.json. It is allow/always for /usr/bin/snitchwatch-bridge-cli as user snitchwatch to TCP 443, with precedence false, so denies and blocklists still win. If the account is missing when the daemon loads rules, the rule is skipped, never broadened.
• The system manifest verifier inventories that file as pinned and immutable:
  • exactly that one /etc path is allowed;
  • symlink, mode and hash checks apply;
  • errors name it as a reserved file.
• smoke and boot-check assert it in the system profile.
• Cargo package set unchanged (two new dependency edges), so the offline GUI crate sources are reused.

Test plan

• Python suites (image-build 25, daemon 23, system 61), shellcheck, just check.
• Code review: APPROVE. The traversal-guard gap it found is now tested; 6 of 6 mutations caught.
• r9 clean image build a5e4992d…; smoke exit=0, including the new 755:root:root rules-dir assertion.
• Independent r9 image review: PASS.
• r9 first boot found a bug, fixed in e600c1a: readiness refused the new /etc manifest entry ("unsafe system manifest entry"). It now accepts exactly that path and refuses a symlinked parent; 3 tests; review APPROVE.
• r10 image f5f22e8f… from e600c1a; independent review PASS (no package drift vs r9).
• r10 VM gate: PASS. Evidence: output/snitchwatch-fresh-vm-r10.0N0Fnn/R10-VM-ACCEPTANCE-RESULT.json.
  • Blocklists: subscribe, "Rule installed", a listed host is blocked, modes, 0 AVCs, no resend on bridge restart, unsubscribe.
  • Fetch rule: no compile error in /var/log/opensnitchd.log; a fetch succeeds with no prompt on deny-default; read-only row.
  • fix(snitchwatch): keep a rule in the daemon when deleting its file fails #93 pause: a waiting prompt is allowed once with the label; new connections pass during the pause; prompts return after resume.
  • Empty process path: with the shipped InterceptUnknown: false there is no prompt. With a VM-only true, an <unknown> prompt appears; Deny shows "couldn't identify this program's file … only to this connection" and writes no rule.
  • fix(snitchwatch): keep the firewall up when the bridge gRPC socket stops #86: stop/start of the gRPC socket keeps the firewall up and it reconnects.
  • Background-connection capture: for the Snitchwatch session.
  • Reboot loop: 10/10 clean.
• CI green

[bearyjd]

Included via #92 (merge commit af32644): this PR's commits are in main as part of the stacked merge; the r12 image was VM-accepted at 21adea3.