feat(prometheus+spawn): Prometheus engine (stubbed) + manual Pump.fun creator

Built by 2 parallel agents (+ image-API research):
- @pyre/prometheus: generateSpawn() engine — deterministic §9 meta-mixer
  (40/25/20/15), prompt builder ("inspired mutation, not a clone" + no
  people/brands), name/ticker/lore/tagline gen, image-prompt, denylist + moderation
  safety. PROVIDER-ABSTRACTED (TextProvider/ImageProvider/ModerationProvider) with
  deterministic STUBS so it runs keyless today; real call shapes documented (Claude
  Haiku text · FLUX schnell image · OpenAI omni-moderation). 13 tests.
- @pyre/db: migration 002 (prometheus_generations, spawn_records) + record/list/get.
- @pyre/api: admin-gated POST /api/prometheus/generate + /api/spawn/launch
  (x-admin-token; CLOSED with 403 when ADMIN_API_TOKEN unset; timing-safe compare),
  public GET /api/spawns + /api/spawn/:id.
- @pyre/web: public /spawn record page; @pyre/core SpawnRecord type.

Verified: typecheck 8/8, 134 tests (core 91 + prometheus 13 + solana 30), web build
(+/spawn), migrate 002 live, /api/spawns OK, admin gate returns 403 (unconfigured).
Follow-ups: set ADMIN_API_TOKEN to use admin endpoints; wire real provider keys;
receiptId→DB-id wiring; admin generation UI.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

infra/status/status.json

@@ -64,26 +64,26 @@
     {
       "id": 4,
       "name": "Prometheus Generator",
-      "state": "todo",
+      "state": "in_progress",
       "items": [
+        { "label": "Meta mixer (deterministic influence model)", "done": true },
+        { "label": "Spawn name/ticker/lore generation (provider-abstracted)", "done": true },
+        { "label": "Image prompt generation", "done": true },
+        { "label": "Safety checks (denylist + moderation)", "done": true },
         { "label": "Generation input from receipt", "done": false },
-        { "label": "Meta mixer", "done": false },
-        { "label": "Spawn name/ticker/lore generation", "done": false },
-        { "label": "Image prompt generation", "done": false },
-        { "label": "Safety checks", "done": false },
-        { "label": "Admin approval UI", "done": false }
+        { "label": "Wire real providers (keys) + admin approval UI", "done": false }
       ]
     },
     {
       "id": 5,
       "name": "Manual Pump.fun Launch Workflow",
-      "state": "todo",
+      "state": "in_progress",
       "items": [
-        { "label": "Approved Spawn package", "done": false },
-        { "label": "Metadata JSON", "done": false },
-        { "label": "Operator launch checklist", "done": false },
-        { "label": "Mint/url/tx record input", "done": false },
-        { "label": "Public Spawn record page", "done": false }
+        { "label": "Spawn records DB + admin generate/launch endpoints", "done": true },
+        { "label": "Mint/url/tx record input (admin)", "done": true },
+        { "label": "Public Spawn record page (/spawn)", "done": true },
+        { "label": "Metadata JSON + IPFS upload", "done": false },
+        { "label": "Operator launch checklist / semi-auto create", "done": false }
       ]
     },
     {