feat: ship production local assurance viewer in core

packages/casan-devkit/tests/hybrid-install-tests.sh

@@ -45,7 +45,7 @@ assert {path.name for path in (root / "packages").iterdir()} == {
     "casan-harness", "casan-devkit",
 }
 assert {path.name for path in (root / "packages/casan-harness").iterdir()} == {
-    "adapters", "agentops", "config", "governance", "memory", "prompts",
+    "adapters", "agentops", "assets", "config", "governance", "memory", "prompts",
     "schemas", "scripts", "security", "templates",
 }
 assert {path.name for path in (root / "packages/casan-devkit").iterdir()} == {
@@ -70,10 +70,16 @@ for forbidden in (
 ):
     assert not (root / forbidden).exists(), forbidden
 for required in (
+    "packages/casan-harness/assets/local-viewer/index.html",
+    "packages/casan-harness/assets/local-viewer/app.css",
+    "packages/casan-harness/assets/local-viewer/app.js",
     "packages/casan-harness/config/project-registry.json",
     "packages/casan-harness/config/tool-registry.yaml",
     "packages/casan-harness/scripts/bash/project-gate.sh",
     "packages/casan-harness/scripts/python/agentic_bridge.py",
+    "packages/casan-harness/scripts/python/local_report.py",
+    "packages/casan-harness/scripts/python/local_viewer.py",
+    "packages/casan-harness/scripts/python/report_cli.py",
 ):
     assert (root / required).is_file(), required
 registry = json.loads(
@@ -138,8 +144,10 @@ for forbidden in (
 ):
     assert not any(name == forbidden or name.startswith(forbidden + "/") for name in names), forbidden
 for required in (
+    "packages/casan-harness/assets/local-viewer/index.html",
     "packages/casan-harness/config/tool-registry.yaml",
     "packages/casan-harness/scripts/bash/casan-harness.sh",
+    "packages/casan-harness/scripts/python/local_viewer.py",
     "packaging/runtime-layout.json",
     "scripts/copy-runtime.py",
     "install.sh",