Phases 34 to 42: nodes, history, approvals and the rename

Nodes and the hub, the config time machine, blast radius, signed approvals, stack integrations, the pre-1.0.0 pentest checklist, a follow-up round, and the rename from EnvVault to UnENVerse.

Phase 34: Nodes

Status: Done. Earlier numbers: 27 → 31 → 32 → 33.

Hub/node, enrollment, observe, push/pull.

Phase 35: Config time machine

Status: Done. Earlier numbers: 26 → 32 → 33 → 34.

Versioned config with its secrets.

Phase 36: Blast radius

Status: Done. Earlier numbers: 28 → 33 → 34 → 35.

Materialisation log, exact rotation list.

Phase 37: Approval

Status: Done. Earlier numbers: 29 → 34 → 35 → 36.

Human-in-the-loop apply, hash-bound.

Phase 38: Stack integrations

Status: Done. Earlier numbers: 31 → 35 → 36 → 37.

Prometheus, Grafana, Homarr/Homepage, Nextcloud, VS Code, and the adapter shape they share.

Phase 39: Pentest before 1.0.0

Status: In progress. Earlier numbers: 35 → 37 → 38.

Authorised, against the user's own hub, nodes and workstation. Last. Now also covers 24.3's feed tokens and 24.4's registry oracle.

Phase 41: Sub-phases 28.1, 29.1, 30.1, 30.2, 34.1, 37.1, 38.1 and the 24.5 leftovers, comm

Status: Done.

Sub-phases 28.1, 29.1, 30.1, 30.2, 34.1, 37.1, 38.1 and the 24.5 leftovers, committed as batch 41: see their rows.

Phase 42: The rename to UnENVerse, restore a snapshot or a node's file into chunks (`src/t

Status: Done. Earlier numbers: 40.

The rename to UnENVerse, restore a snapshot or a node's file into chunks (src/ts/restore-chunks.ts), the Docker viewer (tools/viewer/), and the Phase 24.1 Discord acceptance with public inference.