build: add PFB candidate build interface

[xxxsen]

Summary

• expose a local candidate build entry point for PFB worktrees
• allow the Web build output directory to be selected by the candidate builder
• emit a validated candidate descriptor with artifact hashes and repository identity

Validation

• bash syntax check
• Python descriptor compile check