plan: rev 2 — add thin-client API distribution and compute entity provisioning
Two onboarding paths share the same lifecycle state machine:
1. Workstation self-enrollment: curl bootstrap.sh | bash → API enroll
→ thin client (no git clone, no sync timer). Context poller replaces
5-minute pull. Only AGENTS.md, OIKOS.md, tools/ fetched to disk.
2. Compute entity provisioning: POST /entities/provision → Oikos
actuator creates LXC/VM/container on Proxmox host. Validates VMID,
IP, capacity, template. Creates relationship edges (hosts, provides,
mounts, depends-on) atomically. No self-enrollment, no age key.
Adds: context endpoint for agent file deltas, provisioning_steps table,
actuator provision methods, type-specific transition checks, full
verification matrix covering both paths.
dtoro
79dc87d584