build agents only from internal/meta; delete the hive's local meta flake

The hive no longer renders, locks or commits a meta flake. A rebuild's
MetaSync node picks the internal/meta commit and records it with the
hyperhive and config pins it holds; Prebuild, Swap and Create build from it,
and a head that does not pin the agent's current config fails the build
naming the agent. hive-priv's meta_rev is required.

Removed: meta.rs sync/lock/render, the manual-rebuild relock, the boot
sweep's hyperhive bump (MetaLock), the update-meta-inputs form and its
panel, MetaWindow, the hive's hyperhive_rev setting.

Kept: agent_set::refresh holds what sync_agents also did (topology.json, the
gateway's agent-socket map and nginx include), called from spawn, destroy,
rebuild and the migration.

The boot reconcile and the stale-start upgrade compare the agent's marker
with the hyperhive pin of internal/meta; the dashboard's deployed chip reads
the config marker a successful build writes.

hive-c0re/src/job_queue/model.rs

@@ -16,14 +16,10 @@ pub use hive_host_sock::jobs::State;
 use serde::Serialize;
 
 /// The primitive operations — each kind maps to one executor fn in
-/// `exec.rs`, a thin wrapper over existing `lifecycle.rs` / `meta.rs`
-/// code. Concurrency is gated by two resource classes (see
+/// `exec.rs`, a thin wrapper over existing `lifecycle.rs` / `meta_rev.rs`
+/// code. Concurrency is gated by resource classes (see
 /// [`Resource`](super::resource::Resource), declared per node where the node
-/// is constructed rather than derived from its kind); the
-/// meta *repo* is serialized by `meta::META_LOCK` inside the wrapped
-/// functions themselves, which is why there is no `GitCommit` node —
-/// a standalone commit node would open a dirty-working-tree window
-/// between nodes that the fused `meta.rs` ops deliberately close.
+/// is constructed rather than derived from its kind).
 ///
 /// What each kind does, the resource/lease rules, and the DAG shapes they
 /// compose into live in the node-inventory table and surrounding sections
@@ -33,10 +29,9 @@ use serde::Serialize;
 #[serde(tag = "kind", rename_all = "snake_case")]
 #[strum(serialize_all = "snake_case")]
 pub enum NodeKind {
-    /// The rebuild's meta-repo preamble. `relock = false` only for
-    /// meta-update cascade rebuilds (re-locking would revert the bump the
-    /// cascade just committed).
-    MetaSync { agent: String, relock: bool },
+    /// The rebuild's preamble: runtime-dir prep and the `internal/meta`
+    /// commit the build reads.
+    MetaSync { agent: String },
     /// Out-of-band toplevel build while the container keeps serving.
     Prebuild { agent: String },
     /// `nixos-container update` profile-swap.
@@ -46,7 +41,7 @@ pub enum NodeKind {
     /// First-spawn pre-create provisioning.
     Provision { agent: String },
     /// First-spawn `nixos-container create` proper. Assumes the
-    /// upstream `Provision` node already registered the agent in meta.
+    /// upstream `Provision` node already registered the agent.
     Create { agent: String },
     /// `nixos-container destroy` plus the un-registration that follows it.
     ///
@@ -60,15 +55,7 @@ pub enum NodeKind {
     PurgeState { agent: String },
     /// The post-destroy bookkeeping tail.
     DestroyBookkeeping { agent: String },
-    /// Meta flake lock bump. `sweep = false`: `meta::lock_update` with this
-    /// node's own `inputs`; `sweep = true`: `meta::lock_update_hyperhive`
-    /// (boot sweep, `inputs` empty). See _Notable collapses_ for how the
-    /// scheduler appends the fan-out `Rebuild` DAGs on completion.
-    MetaLock {
-        sweep: bool,
-        fanout: Option<Vec<String>>,
-        inputs: Vec<String>,
-    },
+
     /// Idempotent power converge *planner*: fans a child
     /// [`NodeKind::Start`] / [`NodeKind::Stop`] out at runtime rather than
     /// doing the mechanical work itself.
@@ -140,11 +127,7 @@ impl hive_jobq_wire::WireNode for NodeKind {
         if !agent.is_empty() {
             data.insert("agent".to_owned(), agent.into());
         }
-        if let NodeKind::MetaLock { inputs, .. } = self
-            && !inputs.is_empty()
-        {
-            data.insert("inputs".to_owned(), inputs.clone().into());
-        }
+
         // Not in the payload at all — the build log is keyed on node identity
         // in a side table, which is why `data` is handed the id.
         if let Some(log) = crate::build_logs::global().and_then(|h| h.id_for_node(id)) {
@@ -160,8 +143,7 @@ impl hive_jobq_wire::WireNode for NodeKind {
 
 impl NodeKind {
     /// The agent this node targets, or `""` for agentless kinds
-    /// ([`NodeKind::MetaLock`] on the `hyperhive` pseudo-agent, and the
-    /// swarm-wide sweeps and pulls).
+    /// (the swarm-wide sweeps and pulls).
     #[must_use]
     pub fn agent(&self) -> &str {
         match self {
@@ -186,8 +168,7 @@ impl NodeKind {
             | NodeKind::AgentWindow { agent }
             | NodeKind::EmitRebuilt { agent, .. }
             | NodeKind::SetWanted { agent, .. } => agent,
-            NodeKind::MetaLock { .. }
-            | NodeKind::ForgeSweep
+            NodeKind::ForgeSweep
             | NodeKind::MatrixSweep
             | NodeKind::KnowledgePull
             | NodeKind::WantedPull => "",