[asselstine]

Summary

• Add an optional public Docker/OCI VM image to exe.dev job execution settings and snapshots; pass it safely as new --image=... for new runs.
• Add an authorized /api/v1 background verification operation with persisted tenant-scoped progress, image/SSH/agent failure reporting, ambiguous create reconciliation, and ownership-checked cleanup retries.
• Add explicit editor verification with refresh-persistent progress, configuration invalidation and stale-response handling. Autosave does not provision VMs.
• Update generated OpenAPI/client contracts, MCP job support and user documentation.

Validation

• npm run generate and docs generation/validation.
• npm test with the isolated local PostgreSQL validation database: all backend and browser lanes passed; API 67 files / 423 tests passed (5 skipped), app 66 tests passed (1 skipped).
• Chromium and the VM verification workflow were exercised with mocked exe.dev API responses; no live VM was created.

[linear]

GEN-2728