v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

statfs fsclass helper (network/autofs/stub/unknown, fail-open); probe not_network_fs
assertion (stub can never verify — red-proven); deploy-time stub refusal (idle autofs
proceeds — red-proven); distinct stub badge, stub wins over unreachable (unreachable line
byte-identical); deployed select shows stored HDD_PATH (red-proven vs IsDefault-only).
MinAgent unchanged 0.81.0. Gates green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

controller/internal/system/fsclass_other.go

@@ -0,0 +1,9 @@
+//go:build !linux
+
+package system
+
+// ClassifyPathFS is Linux-only (statfs f_type); off-linux (dev hosts) there is no mount namespace
+// to interrogate — no verdict, callers fail open.
+func ClassifyPathFS(path string) string {
+	return FSClassUnknown
+}