Initial varys-monitor agent

HTTP service reachability checks for 12 services + agent watchdog.
Writes status dashboard to /opt/sites/varys/ and last-run.json for Citadel.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

run.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Run varys-monitor: builds image, checks all services and agents, exits.
+# Schedule via cron: */15 * * * * /opt/stacks/varys-monitor/run.sh >> /opt/agent-os/logs/varys.log 2>&1
+
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+docker build -q -t varys-monitor "$SCRIPT_DIR"
+docker run --rm \
+  --network proxy \
+  --volume /opt/sites:/opt/sites \
+  --volume /opt/agent-os:/opt/agent-os \
+  --env SITES_DIR=/opt/sites \
+  --env AGENT_OS_DIR=/opt/agent-os \
+  varys-monitor