job_queue: fix the boot sweep's lost declarations, drop the node wrapper

Two review findings on the resources-at-construction change.

argus: `workers::auto_update`'s boot sweep constructs nodes through
`templates::node` too, and it was not converted. With the kind-derived
declaration gone, its sweep `MetaLock` and its per-agent `Reconcile`
silently declared no resources at all — so a boot reconcile no longer
held the agent lease and could race another DAG's container ops, and the
sweep's meta commit could land inside another node's staged deploy
window. Nothing failed to compile: removing an implicit behaviour from a
helper is invisible at every call site that relied on it.

The declarations now live in a pure `boot_nodes`, split out of
`submit_boot_tree` so they can be exercised without a `Coordinator`.
That path is the only place job nodes are built outside `job_queue/`,
which is exactly why it had no coverage; `boot_sweep_nodes_declare_
their_own_resources` closes that, asserting against declared graph edges
rather than against the kind.

mara: `templates::node` is a redundant redirect now that it no longer
derives resources — deleted, and its 43 call sites use `Job::node`
directly. The reasoning it documented moved to the module docs of
`templates.rs` and `resource.rs`, which is where it stays true.

hive-c0re/src/job_queue/resource.rs

@@ -4,10 +4,10 @@
 //! payload `N`; here `R` is [`Resource`] and `N` is [`NodeKind`] directly (each
 //! variant carries the agent it targets).
 //!
-//! **A node's resources are declared where the node is constructed**, not
-//! derived from its kind — see `templates::node`. Deriving them made the
-//! requirement a property of the *kind*, which let a kind that happened to run
-//! under a holding ancestor declare nothing at all.
+//! **A node's resources are declared where the node is constructed** with
+//! `.needs(…)`, not derived from its kind. Deriving them made the requirement a
+//! property of the *kind*, which let a kind that happened to run under a
+//! holding ancestor declare nothing at all.
 //!
 //! All of a node's resource edges are acquired **atomically**
 //! (`try_acquire_all`) — a node never holds one resource while waiting on