docs: REPORT + README — storage lifecycle + acceptance sweep (controller half)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

controller/README.md

@@ -636,8 +636,16 @@ not just those with HDD data. Non-HDD apps can configure destination, method, an
 >   a returned drive re-attaches + auto-restarts them; `actionStack` refuses to start an app whose drive
 >   is absent ("tárhely nem elérhető"). SSD/system paths are never gated.
 > - **H1 endpoints** `POST /api/storage/{disconnect,reconnect,restart-apps}` drive the host-side
->   eject/reconnect (no guest reboot). A guest reboot self-converges (`recreateBootStaleApps` recreates
->   boot-stale drive-backed apps onto the re-propagated drive once the agent re-binds it).
+>   eject/reconnect (no guest reboot).
+> - **Lifecycle (v0.68.x):** a "Leszerelés" button decommissions a drive (migrate-then-decommission OR
+>   decommission-anyway type-to-confirm — non-destructive, never touches the parent mp); a
+>   "Visszacsatlakoztatás" button one-click re-enrolls a decommissioned/ejected drive (clears the marker,
+>   re-binds under the parent, restarts gate-stopped apps). Decommissioning the DEFAULT auto-promotes
+>   another schedulable drive (`defaultPromotionTarget`), or BLOCKS if it's the only one. Eject and
+>   decommission keep the RAW drive mounted (logical retire) so re-enroll re-binds it.
+> - **Guest-reboot convergence is DETERMINISTIC** via the agent's `guest_boot_id`: the controller persists
+>   `LastGuestBootID` and, when it changes, recreates EVERY deployed drive-backed app onto the
+>   re-propagated drive (`processGuestBootChange` — no fragile container-uptime sampling).
 >
 > **⚠️ Rebuilt on the agent-delegated disk model (v0.43.0), made ROLE-AWARE in v0.44.0, UX-polished in
 > v0.45.0.** After the 8C