docs: §D supervised reboot — F2-a + F2-b live-validated (both findings CLOSED)

F2-a red-proof PASS: parent came up own peer group (shared:94, not
shared:1), no doubling, guest sees both drives. F2-b PASS: reboot with the
exact snapshot-delete stuck state → agent auto-recovered (unlock → removed
real dangling vzdump snapshot → started CT). Zero spurious pages. Two
live-caught fixes noted (?source=active, AllowWarnings).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0162BnMpUXscPsUB1cU8Tr6K

CHANGELOG.md

@@ -32,6 +32,18 @@ Closes the two host-reboot findings from `TESTRUN-fullstack-2026-06-29.md`.
   - Tests: a stale-script/current-unit case triggers reinstall (the F2-a regression); both-current is a
     no-op; missing files are stale; a content guard asserts the shipped script keeps `make-private`.
 
+- **Live-caught fixes (same version, found during felhom-pve validation):** PVE 9.x rejects
+  `GET /nodes/{node}/tasks?running=1` (HTTP 400 "property not defined in schema") — the invariant guard
+  now uses `?source=active`. And the unprivileged-LXC start emits a benign `WARNINGS: 1` (systemd-nesting)
+  advisory that false-failed the recovery's start — `Start` now uses `AllowWarnings` (matching the
+  restore-test's start step).
+- **§D supervised reboot — both findings live-validated.** F2-a: after reboot `/mnt/felhom-drives` came
+  up as its OWN peer group (`shared:94`, not `shared:1`) with no doubling; guest sees both drives, apps
+  healthy. F2-b: a reboot with the exact stale state (induced `snapshot-delete` lock + a real dangling
+  `vzdump` snapshot) reproduced the stuck symptom (pve-guests "CT is locked (snapshot-delete)" → start
+  failed) and the agent auto-recovered — unlock → removed the real dangling snapshot → started the CT.
+  Zero spurious operator pages on the reboots. See
+  `felhom.eu/documentation/audits/TESTRUN-fullstack-2026-06-29.md`.
 - Version `0.48.0 → 0.49.0`.
 
 ## v0.48.0 — report the served local-API leaf fingerprint (hub-side re-key detection, Part A) (2026-06-29)