port build_host_files.py to Go, simplify Hermes MCP, cutover final

- cmd/hermes/main.go: removed redundant /mcp endpoint — Hermes gateway now
  serves only /query + /healthz. MCP goes direct to API (:8090/mcp).
- cmd/oikos/build_hosts.go: Go port of mcp/build_host_files.py as
  'oikos build-hosts'. Reads inventory.yaml, writes hosts/*.yaml.
- cmd/oikos/main.go: added build-hosts role.
- docker-compose.yml: hermes service simplified.
- apps/105: all 6 Oikos services stopped + disabled (confirmed inactive).
- Watchdog cron installed, API stop/restart verified.
- Infisical bootstrap pending (image pull timeout — retry separately).

Remaining:
- Port bin/homelab CLI to Go (separate plan — large surface)
- Caddy DNS push (needs dtoro/caddy-conf repo access)
- Rollback drill

hosts/hubris.yaml

@@ -1,36 +1,36 @@
-# Generated by mcp/build_host_files.py from inventory.yaml.
-# Do NOT edit by hand — your changes will be overwritten.
-# Source of truth: ../inventory.yaml
-name: hubris
+# Generated by oikos build-hosts from inventory.yaml.
+# Do NOT edit by hand.
+
+age_pubkey: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
 kind: proxmox-host
-os: linux
-role: hypervisor
-state: active
 lan_ip: 192.168.8.77
+mcp_endpoint: https://mcp.hubris.network/mcp
 mesh:
   netbird:
-    ip: 100.122.38.109
     fqdn: proxmox-server.netbird.selfhosted
+    ip: 100.122.38.109
 mesh_globals:
-  primary: netbird
   accepted:
-  - netbird
-  - tailscale
+    - netbird
+    - tailscale
+  primary: netbird
 mounts:
-- /mnt/library
-ssh:
-  port: 22
-  netbird_port: 22022
-  user: root
+  - /mnt/library
+name: hubris
+os: linux
+role: hypervisor
 runs:
-- proxmox_ui
-services_hosted:
-- name: proxmox_ui
-  url: https://proxmox.hubris.network
-  backend: hubris
-  port: 8006
-  doc_page: knowledge/wiki/hosts/hubris.md
-  risk_notes: "hypervisor UI \u2014 changes here affect every guest on the node"
-age_pubkey: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
-mcp_endpoint: https://mcp.hubris.network/mcp
+  - proxmox_ui
 secrets_issuance_endpoint: https://secrets.hubris.network/issue
+services_hosted:
+  - backend: hubris
+    doc_page: knowledge/wiki/hosts/hubris.md
+    name: proxmox_ui
+    port: 8006
+    risk_notes: hypervisor UI — changes here affect every guest on the node
+    url: https://proxmox.hubris.network
+ssh:
+  netbird_port: 22022
+  port: 22
+  user: root
+state: active