add /api/control/explore endpoint to trigger exploration on demand
Same pattern as /api/control/post — bearer-token auth, grabs the
poller's handler, dispatches explore() as a background task. Lets
the operator trigger an exploration run without waiting for the next
scheduled window or running code locally.