R-50 SHIPPED: fleet migrated to the island; Phase 5 docs

- B2 demo-hp + B3 demo-felhom migrated to the island (agent 0.96.0), apps
  served throughout (0 container restarts), island /storage 200, LAN DNS pinned
  to the LAN IP, hub reports 0.96.0. No rollback.
- capability-map 'site/network change' row PARTIAL -> PROVEN-LIVE
- ROADMAP R-50 -> SHIPPED (fleet-migrated); add R-74 (island on Peti's cluster)
- nodes.md: both boxes island-bound, agent 0.96.0

documentation/operations/nodes.md

@@ -13,7 +13,8 @@
 | Firmware | AMI AN3PLUS-class | **AMI M42 v01.10 (11/11/2020)** |
 | PVE node name | `demo-felhom` | `felhom-host` |
 | Customer | `demo-felhom` | `demo-hp` |
-| Agent | 0.95.0 | 0.95.0 |
+| Agent | 0.96.0 | 0.96.0 |
+| Control plane | **island** `169.254.253.1:8443` on `vmbr9` (R-50, migrated 2026-07-25) | **island** `169.254.253.1:8443` on `vmbr9` (R-50, migrated 2026-07-25) |
 | SSH alias | `felhom-pve` | **`demo-hp`** |
 | Tailnet | `100.70.170.35` | **`100.76.96.79`** |
 | Loader used to install | `mkimage` (unsigned, SB **off** — firmware workaround) | **`shim`, Secure Boot ENABLED** |
@@ -57,7 +58,8 @@ that looked installed and could never call home. Repaired on the console by brid
 
 Current, post-repair: `vmbr0` static `192.168.0.87/24`, gw `192.168.0.1`, bridge-port `enp2s0f0`.
 No trace of `192.168.100.2` remains. `wg-felhom` `10.77.0.3/32` up to the hub. Guest **9201
-`demo-hp`** running. Agent **0.95.0** (deployed 2026-07-25 via break-glass; `.bak-0.93.0` retained; caps 68/68 ok).
+`demo-hp`** running. Agent **0.96.0** (R-50 island: `local_api` on `169.254.253.1:8443`/`vmbr9`,
+guest `eth1 169.254.253.2/30`, `lan_resolver.host_ip` pinned to `192.168.0.87`; `.bak-0.95.0` retained; caps 68/68 ok).
 
 ### Designated drill + build VM host (operator ruling, 2026-07-25)