Stand up a per-workspace environment recipe end to end: interview the human for connection mode, provider, agent, and git auth, scaffold the lifecycle scripts and state file, build the base snapshot and the agent-auth snapshot, wire the environmentRecipes entry, and loop the recipe doctor dry-run plus live provision self-test until both pass — paid checkpoints gated on explicit human OKs, the interactive agent login left to the human. The unit is one recipe. Use when "run this in the cloud", "set up a sandbox recipe", "per-workspace environment", "orca vm recipe doctor fails", "provision ephemeral dev environments". Not for placing one worker on an existing host (orchestr…
