Customer-run delivery

Start from a GitHub issue.

Nereid loads the issue, validates the delivery contract, and queues it for an enrolled runner. No repository credential is sent in the job packet.