Note

Low Risk
Observability-only changes gated on WaitForAgent; exec and retry behavior are unchanged aside from tracing hooks.

Overview
Adds OpenTelemetry child spans around each phase of a single guest exec attempt when WaitForAgent is set, so traces can separate agent-wait/retry time from connection setup vs. stream I/O vs. command runtime.

Under the existing guest.exec parent span, new steps are guest.exec.get_conn, open_stream, send_start, and recv_until_exit. The receive step records stdout/stderr byte counts, bytes sent, and exit code on success or failure. Step spans are not created when WaitForAgent is zero, avoiding duplicate noise next to API-level exec spans.

Tests use an in-memory span recorder to assert the full span tree and attributes on the wait path, and that no guest.exec* spans appear without waiting. Retry tests now clean up pooled gRPC connections via CloseConn.

^{Reviewed by Cursor Bugbot for commit 4b6e973. Bugbot is set up for automated code reviews on this repo. Configure here.}