Report FTW driver inventory to Nova

[frahlg]

What

• build a bounded sourceful.driver-inventory/v1 snapshot from the drivers that FTW actually loaded
• report exact source or package hashes, version, source class, channel, control class, instance count and health
• publish the retained inventory over the existing authenticated Nova link on connect, after a content change and every 15 minutes
• omit site names, instance names, connection data, device IDs, tokens, logs and config
• document that the first beta only covers FTW sites with Nova federation enabled

Why

We need exact fleet driver use before any broad driver cutover or control beta. Nova can group fresh reports by driver, version and provenance while showing the reporting coverage.

Release order

Merge and deploy srcful-device-support#13 and srcful-novacore#145 before releasing this change. This PR does not enable Lua control or remove the existing control-package block.

Checks

• make verify
• all Go packages
• 35 optimizer tests through the uv-managed repo environment
• external optimizer integration
• Compose migration and container boundary tests
• go vet ./...
• go build ./...
• git diff --check