hub v0.179.1: a host boot ends "the host needs a restart" at once (demo-felhom 2026-11-08)

The host layer's reboot-needed run is cut at the host's last boot (crash guard
last_boot_at, one minute skew margin): the kernel step's reboot is reported on the
kernel layer, so the flag outlived it until the next night. Feeds the System page
and the 14-day alarm. Test TestRebootNeeded_ClearedByAHostBootAfterTheClaim, red on
two mutants.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

hub/CHANGELOG.md

@@ -1,3 +1,18 @@
+## v0.179.1 (2026-11-08) — a host reboot ends „the host needs a restart" at once
+
+- **The defect (demo-felhom, 2026-11-08).** The night's host pass said reboot-needed (05:31 CET); the kernel step rebooted
+  the box at 05:35; the System page still read „the host needs a restart since 2026-11-08" in the morning. The reboot is
+  reported on the KERNEL layer (or not at all, by hand) and the host layer's need lasted until the next night's host pass.
+  Checked on the box: no host process maps a replaced library after the boot.
+- **The fix (`osupdates.layerLine`).** For the host layer, the host's last boot (the crash guard's `last_boot_at` in the
+  newest host report) cuts the reboot-needed run: every claim the hub received before the boot, less one minute for clock
+  skew, is ended; a claim after the boot starts a new run. No boot fact = the old behaviour. The same line feeds the System
+  page and the 14-day `reboot_needed` alarm.
+- **Test** `TestRebootNeeded_ClearedByAHostBootAfterTheClaim` (boot before the claim, inside the margin, after it, then a
+  new claim); red seen on two mutants (no cut; the margin's sign flipped). `go test ./...` green.
+- **Live facts it will act on:** demo-felhom boot 04:35:18Z after its claim at ~04:31Z → cleared; demo-hp boot
+  2026-10-29 before its 2026-11-08 claim → stays (it does need a restart).
+
 ## v0.179.0 (2026-11-03) — no „does not answer" alarm after the restart mail of the same episode (R-1352)
 
 - **R-1352 — the „does not answer" alarm is not mailed after the restart mail of the same episode.** The alarm and the restart lie 2