R-50 runbook: Part C (agent 0.95.0 -> demo-hp) + qm300 forensic

- deployed agent 0.95.0 to demo-hp via break-glass (0.93.0->0.95.0), binary
  sha-verified, caps 68/68 ok, guest 9201 untouched, hub confirms 0.95.0
- forensic: qm300 had no qmdestroy; it died with the mid-July N100 reprovision
- nodes.md: fleet agents 0.95.0; demo-hp deploy note

REPORT.md

@@ -50,6 +50,17 @@ Drill VM 300 left **running in the working island configuration** (snapshot `r50
 day-0). Scratch hub records `drill-r50` (customer + appliance #9) remain — throwaway; teardown noted in
 nodes.md. `demo-hp` host networking, guest 9201, and felhom-pve were **untouched**.
 
-## Not done here (by design / veto)
-- **Part C** (deploy agent 0.95.0 → demo-hp) — veto-able; pending after this evidence.
-- **Forensic** (qm300 disappearance on felhom-pve) — optional, read-only; pending.
+## Part C — agent 0.95.0 deployed to demo-hp (DONE)
+`0.93.0 → 0.95.0` via the sanctioned method (green gate build/vet/test pass; `configs/` unchanged since
+0.93.0 so binary-only). scp via break-glass → backup `.bak-0.93.0` → `install -m0755` → `systemctl
+restart`. Verified: deployed sha256 == local build (`b5fa7c5d…`), version 0.95.0, service active,
+**capabilities 68/68 ok, 0 degraded**, local-api listening, all watchdogs up, no ERROR/panic; **guest
+9201 untouched/running**; hub confirms demo-hp reporting 0.95.0. (Note: the hub's *vouched* Day-0
+artifact still reads 0.93.0 — the manifest vouch is a separate operator step, not needed for a running
+host; flag for follow-up if new installs should get 0.95.0.) Both fleet nodes now run 0.95.0.
+
+## Forensic — where did qm300 go? (DONE, read-only)
+On felhom-pve (demo-felhom, PVE 9.2.2): **no discrete `qmdestroy`.** No `300.conf`, no `vm-300` LVs, no
+`:300:` in any task log (incl. archives), `qm list` empty; task history only reaches back to ~2026-07-16.
+qm300 (the old drill VM) vanished when the **N100 was fully reprovisioned/reborn** mid-July — the whole
+node (task DB + LVM) was recreated from scratch, taking qm300 with it. felhom-pve left untouched.