Pass Tor E2E shared DM flow and harden mesh relay for fleet participants.

MLS export/reset and accept use live HTTP so uvicorn privacy-core state stays consistent; relay persistence and sender_seal fixes enable invite-accept-shared decrypt across onion peers. Adds participant/e2e compose overlays and harness recovery with optional Tor-only replicate mode.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.participant.yml

@@ -0,0 +1,21 @@
+# Lean fleet participant — Infonet swarm + DM relay without global OSINT fetchers.
+# Use on secondary nodes (e.g. Pete) that should stay responsive for Tor DM tests.
+services:
+  backend:
+    environment:
+      MESH_ONLY: "true"
+      SHADOWBROKER_MESH_NODE_RUNTIME: "true"
+      MESH_ARTI_ENABLED: "true"
+      MESH_INFONET_FLEET_JOIN: "true"
+      MESH_WORMHOLE_TRUST_FILE_READY: "true"
+      PRIVACY_CORE_ALLOWED_SHA256: "5dd4b65a317277917842b12d7b430d49913789982ba906bd9a0ea6006d40e28a"
+      MESH_RELAY_PUSH_TIMEOUT_S: "300"
+      MESH_RELAY_MAX_FAILURES: "12"
+      MESH_DM_PENDING_PER_SENDER_LIMIT: "8"
+      MESH_DM_PERSIST_SPOOL: "true"
+      WORMHOLE_STARTUP_DEADLINE_S: "90"
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 2G