Host persistent Camino services and authenticated workspace bootstrap (WI-06)

nix/checked-candidate.nix

@@ -162,6 +162,16 @@ pkgs.runCommand (if contractOnly then "qx-contract" else "qx-checked-candidate")
   cp ${contract}/graph.json "$out/graph.json"
   cp ${manifest} "$out/checks.json"
   ${pkgs.lib.optionalString execution ''
+    ${
+      if builtins.pathExists "${root.directory}/quixos.entry.json" then
+        ''
+          cp ${root.directory}/quixos.entry.json "$out/entry.json"
+        ''
+      else
+        ''
+          echo null > "$out/entry.json"
+        ''
+    }
     cp ${contract}/execution-plan.json "$out/execution-plan.json"
     ${pkgs.lib.optionalString (!contractOnly) ''
       ${pkgs.nodejs_24}/bin/node ${./check-execution.mjs} \