docs: offsite hardening bundle — hub README, REPORT, CONTEXT

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CONTEXT.md

@@ -3,6 +3,17 @@
 > Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
 > `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
 
+- **2026-07-09 — offsite hardening bundle SHIPPED+LIVE (hub v0.39.0 + controller v0.107.0 + agent v0.78.0).**
+  The e2e's sharp edges closed before slices 3–4: **F4** "Re-issue offsite credentials" (explicit operator
+  recovery for consumed-password dead-ends — exactly-1 label scope, fresh one-time secret, ConfigVersion
+  bump; `hetznerapi.ResetBoxPassword` added for dedicated); **F2** host-key scan retry (~60s ladder — first
+  save survives fresh-subaccount DNS lag); **F5** submit-disable + in-flight notice; **key-auth-first bridge**
+  (working installed key → re-pin+reconfigure WITHOUT consuming; fingerprint verify never bypassed; kills the
+  stale-descriptor consume-404 loop); **staged-secret wipe** (agent `DELETE /escrow/stage-secret`; controller
+  calls it on every flip to `escrowed`; the e2e's lingering staged file wiped live through the new endpoint,
+  idempotency proven). All red-proofed. F4 reset NOT exercised live (demo credential untouchable — throwaway
+  customer under supervision when needed). NEXT: SLICE 3 auto-confirm, SLICE 4 soft-quota, Peti runbook.
+
 - **2026-07-09 — offsite provisioning VALIDATED LIVE end-to-end (hub v0.38.1 + controller v0.106.1) — PASS.**
   Full loop through the real pipeline on `demo-felhom` against the new dedicated-project pool box (611714 /
   `u629488`, project 15282031): UI save → sub-account 269008 provisioned → descriptor v6 + one-time password →