refactor: A-series dead code cleanup and ETHOS compliance sweep

- Remove dead queries.RetryCommand function (DEV-019, 31 lines)
- Remove security_settings.go.broken leftover from A-3
- Remove 5 compiled test binaries from aggregator-agent/ (~61MB)
- Remove config_builder.go.restored from repo root
- Remove test_disk_detection.go and test_disk.go (throwaway test files)
- Fix 6 banned word violations (production-ready, enhanced, robust, seamlessly)
- Add .gitignore rules for compiled agent binaries
- Document machine ID duplication for D-1 fix prompt
- Document 30+ pre-existing emoji violations for D-2 pass

No behavior changes. All 41 tests pass.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs/Deviations_Report.md

@@ -232,3 +232,23 @@ This document records deviations from the implementation spec.
 **TODO:** Remove issuer-absent grace period after 30 days from deployment. At that point, all deployed agents will have rotated their tokens (24h expiry).
 
 **Impact:** Cross-type token confusion is blocked for new tokens. Old tokens degrade gracefully.
+
+---
+
+## DEV-023: Pre-existing emoji violations not fixed in refactor pass
+
+**Issue found during A-series refactor:** 30+ emoji characters found in pre-existing log statements across `agents.go`, `machine_binding.go`, `setup.go`, `db.go`, `updates.go`, etc. These predate all A-series audit work.
+
+**Action:** Not fixed in this pass. Fixing pre-existing emojis in established log output could break log parsing pipelines or monitoring. Flagged as future D-2 cleanup item for a dedicated ETHOS compliance pass.
+
+**Impact:** No behavioral change. Pre-existing code remains as-is.
+
+---
+
+## DEV-024: Machine ID implementation divergence flagged for D-1
+
+**Issue found during A-series refactor:** Machine ID is generated in 3 locations with 2 divergences:
+1. `main.go` error fallback uses unhashed `"unknown-" + hostname` instead of SHA256
+2. `example_integration.go` calls `machineid.ID()` directly instead of `GetMachineID()`
+
+**Action:** Not fixed in this pass (requires careful analysis of downstream effects). Flagged as D-1 fix prompt input. See `docs/Refactor_A_Series.md` Task 6 for full analysis.