nix: run the review classifier in a container of its own when a host enables it

deploy.review-classifier.enable (off by default, not derived from
allSwarmServices) puts swarm-review-classifier in its own network
namespace on the bridge, with claude-code and the daemon. A host unit
copies the classifier's store leaf into the container; the daemon reads
its queue client secret and the API key from the store with it.

- glue-bao-tls mints the review-classifier leaf; swarm-bao writes the
  swarm-review-classifier role, reading exactly the API key path and the
  classifier's queue client secret; swarm.nix reserves its CN.
- glue-review-classifier-oidc-client registers the machine client where
  authelia runs, and the publisher carries its secret to the store.
- swarm-nats passes the client id to the responder as
  --review-classifier-client.
- Where the host runs a hive-tier collector, claude exports its metrics
  there; the daemon adds the repo and the PR to the resource attributes.
- module-eval: the new grant and leaf (bao-grants, now sixteen granting
  units), the container's presence and its unit (core-toggle), and the
  client registration and publishing (secret-publisher).

nix/host-modules/glue-bao-tls.nix

@@ -107,6 +107,8 @@ in
       forwarderOidcClientKeyFile = lib.mkDefault "${pkiDir}/forwarder-oidc-key.pem";
       ciRunnerClientCertFile = lib.mkDefault "${pkiDir}/ci-runner.pem";
       ciRunnerClientKeyFile = lib.mkDefault "${pkiDir}/ci-runner-key.pem";
+      reviewClassifierClientCertFile = lib.mkDefault "${pkiDir}/review-classifier.pem";
+      reviewClassifierClientKeyFile = lib.mkDefault "${pkiDir}/review-classifier-key.pem";
       forgePublisherClientCertFile = lib.mkDefault "${pkiDir}/forge-publisher.pem";
       forgePublisherClientKeyFile = lib.mkDefault "${pkiDir}/forge-publisher-key.pem";
       servicesIssuerClientCertFile = lib.mkDefault "${pkiDir}/services-issuer.pem";
@@ -268,6 +270,13 @@ in
         [ -s ${pkiDir}/ci-runner.pem ] || ${signLeaf} ${pkiDir} ci-runner \
           ${lib.escapeShellArg deployCfg.bao.ciRunnerCommonName} "" clientAuth
 
+        # The review classifier's, which reads its API key and queue client
+        # secret. Minted here for the matrix-ctl leaf's reason: the classifier
+        # is a swarm service, so on a classifier host without the store this is
+        # the file an operator copies.
+        [ -s ${pkiDir}/review-classifier.pem ] || ${signLeaf} ${pkiDir} review-classifier \
+          ${lib.escapeShellArg deployCfg.bao.reviewClassifierCommonName} "" clientAuth
+
         # The forge's token publisher. Minted here for the matrix-ctl leaf's
         # reason: the forge is a swarm singleton, so on a forge host without the
         # store this is the file an operator copies.