job_queue: declare a node's resources where the node is constructed

Resources were derived from the node's kind: `templates::node` called
`NodeKind::resource_deps()`, which fanned out to `needs_build_slot` /
`needs_lease` / `needs_meta_window`. That made the requirement a property
of the *kind*, so a kind that happened to run under an ancestor already
holding the resource could get away with declaring nothing.

Three did. `Start`, `Stop` and `PostSwap` appear in none of the three
predicates, and that was only safe because one construction site fans
them out from inside a lease-holding `Reconcile` — a fact about today's
DAG shape, not about the nodes.

Each of the 41 construction sites now says what it holds. `Start` /
`Stop` / `PostSwap` declare the agent lease; per the contract that is a
re-entrant borrow, which a new test pins rather than argues.

`running_transients` reads the node's declared deps instead of
re-deriving from the kind. That closes the blank-pill gap: the pill went
blank during container start, stop and the post-swap tail because the
declaration was missing, not because the filter was wrong.

The deleted predicates carried the only written record of three design
decisions; each moved to the `Resource` variant it constrains rather than
dying with its function.

hive-c0re/src/meta.rs

@@ -34,7 +34,7 @@ static META_LOCK: Mutex<()> = Mutex::const_new(());
 // this module. `META_LOCK` above serializes individual git ops but cannot
 // keep another op out of that staged window; that window is owned by the
 // job queue instead, as `Resource::MetaWindow`, declared by every
-// meta-mutating node kind (`NodeKind::needs_meta_window`). A resource can
+// meta-mutating node kind (it declares `Resource::MetaWindow`). A resource can
 // be held by a subtree root across its children, which a `MutexGuard`
 // (bounded by one executor fn) cannot — that's what lets the deploy be
 // modelled as sub-nodes rather than one opaque node.