Approved text cleaning

This first-party stateless profile is extracted from the Daedro cleaning package. The Go stdio server delegates bounded deterministic transformations to the bundled Python standard-library implementation. The build context contains only the selected profile. From the hub repository root run make cleaning-image and supply the resulting immutable local image ID to the managed hub. The preview is side-effect free. Execute requires approval tied to the preview digest.