Integrate BACKBEAT SDK and resolve KACHING license validation

Major integrations and fixes:
- Added BACKBEAT SDK integration for P2P operation timing
- Implemented beat-aware status tracking for distributed operations
- Added Docker secrets support for secure license management
- Resolved KACHING license validation via HTTPS/TLS
- Updated docker-compose configuration for clean stack deployment
- Disabled rollback policies to prevent deployment failures
- Added license credential storage (CHORUS-DEV-MULTI-001)

Technical improvements:
- BACKBEAT P2P operation tracking with phase management
- Enhanced configuration system with file-based secrets
- Improved error handling for license validation
- Clean separation of KACHING and CHORUS deployment stacks

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

vendor/github.com/polydawn/refmt/obj/atlas/transformFuncs.go

@@ -0,0 +1,68 @@
+package atlas
+
+import "reflect"
+
+type MarshalTransformFunc func(liveForm reflect.Value) (serialForm reflect.Value, err error)
+type UnmarshalTransformFunc func(serialForm reflect.Value) (liveForm reflect.Value, err error)
+
+var err_rt = reflect.TypeOf((*error)(nil)).Elem()
+
+/*
+	Takes a wildcard object which must be `func (live T1) (serialable T2, error)`
+	and returns a MarshalTransformFunc and the typeinfo of T2.
+*/
+func MakeMarshalTransformFunc(fn interface{}) (MarshalTransformFunc, reflect.Type) {
+	fn_rv := reflect.ValueOf(fn)
+	if fn_rv.Kind() != reflect.Func {
+		panic("no")
+	}
+	fn_rt := fn_rv.Type()
+	if fn_rt.NumIn() != 1 {
+		panic("no")
+	}
+	if fn_rt.NumOut() != 2 {
+		panic("no")
+	}
+	if !fn_rt.Out(1).AssignableTo(err_rt) {
+		panic("no")
+	}
+	// nothing to do for `fn_rt.In(0)` -- whatever type it is... TODO redesign to make less sketchy; we should most certainly be able to check this in the builder
+	out_rt := fn_rt.Out(0)
+	return func(liveForm reflect.Value) (serialForm reflect.Value, err error) {
+		results := fn_rv.Call([]reflect.Value{liveForm})
+		if results[1].IsNil() {
+			return results[0], nil
+		}
+		return results[0], results[1].Interface().(error)
+	}, out_rt
+}
+
+/*
+	Takes a wildcard object which must be `func (serialable T1) (live T2, error)`
+	and returns a UnmarshalTransformFunc and the typeinfo of T1.
+*/
+func MakeUnmarshalTransformFunc(fn interface{}) (UnmarshalTransformFunc, reflect.Type) {
+	fn_rv := reflect.ValueOf(fn)
+	if fn_rv.Kind() != reflect.Func {
+		panic("no")
+	}
+	fn_rt := fn_rv.Type()
+	if fn_rt.NumIn() != 1 {
+		panic("no")
+	}
+	if fn_rt.NumOut() != 2 {
+		panic("no")
+	}
+	if !fn_rt.Out(1).AssignableTo(err_rt) {
+		panic("no")
+	}
+	// nothing to do for checking `fn_rf.Out(0)` -- because we don't know what entry we're about to be used for.  TODO redesign to make less sketchy.
+	in_rt := fn_rt.In(0)
+	return func(serialForm reflect.Value) (liveForm reflect.Value, err error) {
+		results := fn_rv.Call([]reflect.Value{serialForm})
+		if results[1].IsNil() {
+			return results[0], nil
+		}
+		return results[0], results[1].Interface().(error)
+	}, in_rt
+}