nx_site_intake_serve.nx

nx_site_intake_serve.nx -- the DEPLOYABLE ops shell around the gated pure core nx_site_intake (thin-daemon discipline, nx_survey_daemon precedent: ALL decision logic lives in the 8/8-gated core, this file only binds/reads/writes). LOOPBACK-ONLY 127.0.0.1:8033 -- public traffic must arrive via the sovereign edge proxy row (/intake/ -> 127.0.0.1:8033, debt 1785936366), never directly; binding loopback (tighter than the survey daemon's 0.0.0.0) means a firewall slip cannot expose the raw port. Store plane knowledge/store/siteintake- + evidence log knowledge/status/site_intake.log; store dirs self-healed on startup (the relate-daemon lesson). SO_REUSEADDR so the reconcile cron can rebind instantly after a crash (the office TIME_WAIT lesson). The read helper mirrors sv2_read_req -- 2nd use in the estate; extract to a shared nx_http_read lib on the 3rd (rule 15). Build with --build-only; started deliberately by the mount hook, never as a build side-effect. license_tier: ORIGINAL No hw writes (Rule 26).