hub v0.26.0: pull-based config delivery + retire inbound GUI controls

config_version counter (bumped on every config save) advertised in the report
ACK; controller re-pulls + self-restarts on a change. Retire Trigger Update /
Push Config / Pull Config / Show Diff handlers+routes+buttons and the inbound
geo-notify (keep hub->Cloudflare geo removal). Setup command -> host-install;
delete dead customer.html + config_detail.html. Closes AUDIT-hub-gui F-S1/F-S4.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HxLA1mZurFq9kt8hneFeCs

hub/internal/api/handler.go

@@ -291,6 +291,11 @@ func (h *Handler) handleReport(w http.ResponseWriter, r *http.Request) {
 		if custCfg.Status == "blocked" {
 			resp["customer_blocked"] = true
 		}
+		// Config-refresh (v0.26.0): advertise the per-customer config_version. The controller compares
+		// it against its last-applied version and, on a change, re-pulls controller.yaml + self-restarts
+		// (pull-based config delivery — the hub never connects into the box). Only emitted for
+		// config-managed customers (a report-only box without a config row gets no field and is unaffected).
+		resp["config_version"] = custCfg.ConfigVersion
 	}
 
 	// Phase 2 managed updates: advertise the effective controller-version FLOOR (per-customer override