Agent job scratchpad

One loop: mint a temporary run key → store state → index + search → finish → signed wipe receipt.