fix(hosts): align manifests with observed reality (recon B6/B7/C8/F20.5)

- hosts/solaria/services.yaml: add stability-agent and node_exporter
  (running on solaria since deployment, absent from desired state —
  recon B6); add planner-agent with monitor:false (legacy ai-cluster
  family, decision pending, do not remediate)
- services/stability-agent/service.yaml: owner_node chelsty (not a real
  node) -> per-host, same convention as node_exporter/ha-diag-agent; it
  runs on vps, piha, solaria (F20.5)
- services/mosquitto/: mark NOT DEPLOYED / legacy in service.yaml and
  README — the manifest matches nothing that runs (vps broker = legacy
  ai-cluster stack, piha broker = host systemd package, chelsty has its
  own runtime config; recon C8). Kept until the MQTT topology decision
  (recon open question 7); not deleted yet.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

hosts/solaria/services.yaml

@@ -14,6 +14,38 @@ services:
       data_path: /opt/homelab/state
       logs_path: /opt/homelab/events
 
+  stability-agent:
+    role: node-watchdog          # read-only docker.sock watchdog, emits filesystem events
+    deployment_model: docker-compose
+    exposure: local-only
+    offline_required: true
+    depends_on:
+      local: []
+      external: []
+    runtime:
+      data_path: /opt/homelab/state
+      logs_path: /opt/homelab/events
+
+  node_exporter:
+    role: metrics-exporter
+    deployment_model: docker-compose
+    exposure: local-only
+    offline_required: true
+    depends_on:
+      local: []
+      external: []
+
+  planner-agent:
+    # legacy ai-cluster family — decision pending, do not remediate
+    monitor: false
+    role: ai-planner
+    deployment_model: docker-compose
+    exposure: local-only
+    offline_required: false
+    depends_on:
+      local: []
+      external: []
+
   ollama:
     role: llm-inference          # GPU-backed inference (RTX 4070 Ti SUPER, driver restored 2026-07-16): embeddings (bge-m3) + coder models
     deployment_model: docker-compose

services/mosquitto/README.md

@@ -1,9 +1,15 @@
-# Mosquitto MQTT Broker
+# Mosquitto MQTT Broker — NOT DEPLOYED / LEGACY
+
+> **Status (2026-07-28, truth cleanup):** this manifest matches **nothing that
+> actually runs** (recon `docs/architecture/RECON-multiagent-2026-07-27.md`, C8).
+> The broker on **vps** is part of the legacy ai-cluster stack (being
+> decommissioned, see `docs/architecture/ai-cluster-LEGACY.md`); the broker on
+> **piha** is a host systemd mosquitto (OS package) with no repo definition;
+> **chelsty** has its own config under `hosts/chelsty-infra/runtime/mosquitto/`.
+> Do not deploy from this directory. Kept until the MQTT topology decision
+> (recon open question 7) is made.
 
 Eclipse Mosquitto is an open source (EPL/EDL licensed) message broker that implements the MQTT protocol versions 5.0, 3.1.1 and 3.1.
 
-## Usage
-Deployed on the `piha` node.
-
 Port 1883 for standard MQTT.
 Port 9001 for WebSockets.

services/mosquitto/service.yaml

@@ -1,6 +1,13 @@
+# NOT DEPLOYED — LEGACY MANIFEST (2026-07-28 truth cleanup, recon C8).
+# This definition matches NOTHING that actually runs: the broker on vps belongs
+# to the legacy ai-cluster stack (being decommissioned), and piha's broker is a
+# host systemd mosquitto (OS package, no repo definition). The chelsty broker
+# has its own config under hosts/chelsty-infra/runtime/mosquitto/. Kept for
+# reference until the MQTT topology decision (recon open question 7) is made —
+# do not deploy from this directory.
 service:
   name: mosquitto
-  owner_node: vps
+  owner_node: vps  # WRONG in practice — see header; README used to say piha
   exposure: private
   dependencies: []
   ports:

services/stability-agent/service.yaml

@@ -1,6 +1,10 @@
 service:
   name: stability-agent
-  owner_node: chelsty
+  # Deployed per-host: runs on vps, piha and solaria (and chelsty-infra once the
+  # site is revived). Was owner_node: chelsty — not a real node name; fixed during
+  # the 2026-07 truth cleanup (recon B7/F20.5), closing the docs/backlog.md
+  # "stability-agent / node_exporter owner_node single" item for stability-agent.
+  owner_node: per-host
   exposure: private
   dependencies: []
   healthcheck: