cleanup: fix all stale references across .agents/ docs

- Rewrite AGENTS.md: DB as source of truth, MCP knowledge tools, archive refs
- Fix OIKOS.md: seeds/ paths, remove Python-era notes, update deployment status
- Fix commands.md, agent-enrollment.md: archive/knowledge/ links
- Fix all SKILL.md files: remove hosts/*.yaml refs, point to inventory.yaml
- Fix HERMES.md, schema.md, page-templates.md, llm-wiki.md: update paths
- Fix bootstrap.sh: identity check reads inventory.yaml
- Fix README.md, cutover-checklist.md: stale wiki references
- Move convert-wiki.py to archive/ (one-shot done)

.agents/shared/llm-wiki.md

@@ -1,12 +1,12 @@
 # LLM Wiki — the documentation contract
 
 How the narrative documentation in this repo is organized. The pattern is borrowed from the
-`sources / wiki / index / log` model: a durable synthesized layer (`knowledge/wiki/`) built on top
+`sources / wiki / index / log` model: a durable synthesized layer (`archive/knowledge/`) built on top
 of immutable evidence (`knowledge/sources/`, incident records), with pure-listing indexes and an
 append-only operations log.
 
 This contract governs the **narrative layer only**. The machine-readable substrate — `inventory.yaml`,
-generated `hosts/*.yaml`, `oikos/`, `mcp/`, `secrets/`, `bin/` — is not part of the wiki and never
+`secrets/`, `scripts/`, `bin/` — is not part of the wiki and never
 moves under it. See [the knowledge schema](../domains/knowledge/schema.md) for the split.
 
 ## Layers
@@ -14,7 +14,7 @@ moves under it. See [the knowledge schema](../domains/knowledge/schema.md) for t
 - **Sources** are immutable raw material: incident records (`knowledge/sources/investigations/`), external reference
   docs (`knowledge/sources/references/`), and the live system itself (`pct config`, `docker inspect`).
   Read them; do not rewrite them into other sources.
-- **Wiki** (`knowledge/wiki/`) is the synthesized, authoritative current-state layer: one page per
+- **Wiki** (`archive/knowledge/`) is the synthesized, authoritative current-state layer: one page per
   node (`containers/`, `vms/`, host narratives) and per cross-cutting system (`infrastructure/`). A
   reader understands the topic from the wiki page without reading the sources.
 - **Index** (`index.md` / folder `README.md`) is a pure listing — every page in scope with a

.agents/shared/page-templates.md

@@ -160,7 +160,7 @@ session.** A change that touches a container page must also update:
 - The Caddy page site list (if the change affects `*.hubris.network` routing)
 - The DNS / ingress infrastructure pages (if the change affects routing)
 - The `hosts/{hubris,strong}.md` host page (if container count changes)
-- The `inventory.yaml` host entry (source of truth for the `hosts/*.yaml` generation)
+- The `inventory.yaml` host entry (single source of truth)
 - The `infrastructure/topology.md` (generated from inventory, but regen if needed)
 
 The pattern of updating only one page and leaving stale references on others