slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

internal/localapi: per-guest local-API server (doc 03 §6) — 7 self-scoped
endpoints, hashed per-guest token store, persisted self-signed leaf with stable
SHA-256 pin, optional 6th daemon goroutine. internal/provision: back-half —
mint token, render bootstrap.json (no registry cred), write 0600, chown
100000:100000, attach pct-set bind mount (host-side, F3, no pct exec).
--selftest=provision. build-golden.sh bakes the controller image + bootstrap
unit. sudoers FELHOM_PROVISION; firewall narrowing artifact.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

configs/felhom-agent.sudoers

@@ -26,4 +26,14 @@ Cmnd_Alias FELHOM_DISK = \
   /usr/sbin/smartctl -a -j /dev/hd[a-z]*, \
   /usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- *
 
-felhom-agent ALL=(root) NOPASSWD: FELHOM_MOUNT, FELHOM_DISK
+# Provisioning back-half (slice 8A, doc 03 §6): populate a guest's bootstrap config mount
+# host-side (internal/provision). These are host-root ops the API token cannot do — a bind mount
+# is root@pam-only, and the chown maps the 0600 bootstrap.json to the unprivileged-LXC guest-root
+# (uid/gid 100000, spike gotcha 1). The host dir is AGENT-OWNED state under /var/lib/felhom-agent/
+# (the wildcard only ever names a path the agent itself created), and the bootstrap file the agent
+# writes there is the only thing these touch. ':' is escaped per sudoers grammar.
+Cmnd_Alias FELHOM_PROVISION = \
+  /usr/bin/chown -R 100000\:100000 /var/lib/felhom-agent/guests/*, \
+  /usr/sbin/pct set [0-9]* -mp[0-9]* /var/lib/felhom-agent/guests/*
+
+felhom-agent ALL=(root) NOPASSWD: FELHOM_MOUNT, FELHOM_DISK, FELHOM_PROVISION