security(discovery): enforce Zone isolation and retire unsafe legacy writers

Bind Agent observations, review, enrichment and telemetry to current Zone
and inventory authority. Preserve immutable MAC ownership and historical
snapshots with stale-result rejection and transactional security audits.

Retire unbound direct/range/scheduled discovery and one/bulk legacy summary
writes in both modes. Require reconciled exact inventory identity or
explicit Zone-scoped IP selection for CSV metadata imports.

Independent Blocker #1 application-security re-audit: PASS on tree
cf863aadc9. Evidence: 141 focused PostgreSQL/HTTP
tests passed; Chromium and PowerShell checks passed. Two documented baseline
source assertions remain unchanged. Production deployment is not approved.

agents/windows/MinerOpsPoolPoller.ps1

@@ -120,6 +120,7 @@ foreach ($miner in $knownMiners) {
     if ($pools.Count -gt 0) {
         $poolSnapshots.Add([pscustomobject]@{
             miner_id = $miner.miner_id
+            miner_version = $miner.miner_version
             ip_address = $ip
             mac_address = $miner.mac_address
             model = $miner.model
@@ -130,18 +131,14 @@ foreach ($miner in $knownMiners) {
 
 Write-Host "Pool snapshots collected: $($poolSnapshots.Count)"
 
-$body = @{
-    agent_id = $AgentId
-    pool_snapshots = $poolSnapshots
-} | ConvertTo-Json -Depth 20
-
-$result = Invoke-RestMethod `
-    -Method Post `
-    -Uri "$HubUrl/api/agent/pool-snapshots" `
-    -Headers $Headers `
-    -Body $body `
-    -ContentType "application/json" `
-    -TimeoutSec 180
+$allItems = @($poolSnapshots.ToArray())
+$result = @()
+for ($offset = 0; $offset -lt $allItems.Count; $offset += 128) {
+    $last = [Math]::Min($offset + 127, $allItems.Count - 1)
+    $body = @{agent_id=$AgentId; pool_snapshots=@($allItems[$offset..$last])} | ConvertTo-Json -Depth 80
+    $result += Invoke-RestMethod -Method Post -Uri "$HubUrl/api/agent/pool-snapshots" `
+        -Headers $Headers -Body $body -ContentType "application/json" -TimeoutSec 180
+}
 
 $result | ConvertTo-Json -Depth 10