secrets: remove hardcoded OmniRoute API key, source from env

chore(security): set visibility to private, sanitize internal Tailscale IPs, and drop qa_evidence tracking

docs: add Hyperstack burst runbook (commands, manifest schema, troubleshooting)

feat(zerogpu): add Breeze TTS 2 experimental voice + remove image gen by policy

docs(omniroute): register verified local STT and embeddings providers

docs: record OmniRoute zeroGPU provider registration and smoke test

docs: document newly integrated GGUF models and zerogpu scout skill in cookbook and goal

fix: require auth only when FLOW_API_KEY is explicitly set