VM101 R18 methods and limitations after R09

Access: VM130 -> ssh pve-mgts -> root@10.71.100.2 with /root/.ssh/pve_to_openwrt_mgts_ed25519.
Remote scripts are standalone POSIX sh streamed as exact stdin bytes to `sh -s`.
Runtime inspection uses `amneziawg`, not `wg`.
OpenWrt uses procd and BusyBox, not systemd.
Logical `/var/lib` can resolve under `/tmp/lib`; compare canonical paths on both operands.
BusyBox find does not support `-printf` or `-quit`.
Machine Git uses GIT_DIR=/root/.vm101-source.git and WORK_TREE=/; full-tree count requires `git -C / ... ls-tree --full-tree`.
The machine-close CLI is case-sensitive: `/opt/router-ops/bin/router-machine-close vm101 "description"`.
R09 must not rerun R08 provider work, target installer, generation build, activation, or target postcheck.
After core PASS, publication failures never trigger automatic runtime rollback.
After the shared publication barrier, no fallible operation or second STOP publication is allowed.
R18 does not implement automatic retry from DEGRADED_POOL_PENDING, consolidation, Direct emergency, Direct failopen, or bootstrap recovery.