ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver
Add bento, ops-core, and egui-updater crate scaffolds