docs: point controller README/CONTEXT at central docs; drop stray mnt artifact

- controller/README.md: authoritative banner (v0.59.0, docs moved to
  felhom.eu/documentation/controller/, bootstrap-deploy note); legacy body retained.
- CONTEXT.md: banner refreshed to v0.59.0 state.
- Removed controller/mnt/user-data/outputs/... — an accidental Claude-sandbox
  output dir (stale duplicate README) committed in the initial import.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

CONTEXT.md

@@ -7,11 +7,25 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-06-12 (storage UX polish)
+Last updated: 2026-06-13 (v0.59.0 audit fixes + docs centralization)
 
-> **NOTE:** this file is stale below this banner (last full pass session 59 / v0.16.1). Current state
-> is tracked in `CHANGELOG.md`, `controller/README.md`, and the auto-memory `MEMORY.md`. Live version:
-> **v0.45.0**.
+> **Live version: controller v0.59.0** (deployed on demo guest 9201), agent **v0.29.1**, hub **v0.11.0**.
+> **NOTE:** the long-form sections far below this banner are stale (last full pass ~v0.16.1). Current
+> state is the dated entries immediately below + `CHANGELOG.md` + the now-authoritative **central docs at
+> `felhom.eu/documentation/controller/`** (code-verified) + auto-memory `MEMORY.md`.
+>
+> **2026-06-13 — v0.59.0 audit fixes + documentation centralization:**
+> - Fixed the validated 2026-06-13 audit findings (records: `felhom.eu/documentation/audits/`):
+>   **CTRL-001** (`.fab` import path traversal — manifest segment validator, fail the parse);
+>   **CTRL-T2-1** (ghost-deployed on crash — `app.yaml` now persists `deployed:false` until `compose up -d`
+>   succeeds, flipped true only on success; in-memory flag still true during pull for UX);
+>   **H10** (plaintext secret on encrypt failure — `SaveAppConfig` now fail-closed, returns an error);
+>   **M2** (misleading lock on init-only `SetStackProvider` removed). All with regression tests.
+> - **AGENT-001** (wrong-disk wipe TOCTOU) fixed on agent branch `fix/agent-001-wipe-durable-reresolve`
+>   — PENDING REVIEW, NOT deployed (supervised merge+golden-rebake reserved; see `AGENT-001-FIX-NOTES.md`).
+> - Built + deployed v0.59.0 to demo guest 9201 (bootstrap mechanism); verified healthy, dashboard 200.
+> - Documentation centralized under `felhom.eu/documentation/` (controller subtree + audits + top index),
+>   code-verified; `controller/README.md` banner points there; this CONTEXT banner refreshed.
 >
 > **2026-06-13 — v0.58.0 OS/Docker-data split prevention layer (Phase 2; Phase 1 = agent v0.29.0):**
 > - OS rootfs + Docker data split onto separate local-lvm volumes (golden bakes 32G rootfs + 256G