Derive a Check from a check: job’s run output — the single
source of truth shared by the agent’s Health-tab cache
(kanade-agent::check_cache) and the backend’s fleet-wide
check_status projector, so the end user’s Client App and the
operator SPA can never disagree about the same run (#908).
Spec §2.11 install layout — OS-aware default paths for config /
mutable data / logs, plus the find_config fallback chain that
every binary uses to locate its config file.
Extract the embedded ProductVersion / FileVersion string from
a Windows PE binary’s VERSIONINFO resource — the same data
File Explorer’s Details tab shows.