feat: owner revoke/update + linux CI

[jtwolfe]

Summary

Continues the REWORK-UNIFY effort on jtwolfe/MyMesh. This slice adds:

Owner Management Over Mesh

Honor owner add/remove/update from carrier over the mesh (not HTTP 17878):

• OwnerRevoke: Node forgets the owner (removes enrollment) when a signed revoke message is received from an enrolled owner
• OwnerUpdate: Updates the label for an enrolled owner when a signed update message is received

Implementation details:

• Added OwnerRevoke and OwnerUpdate variants to ControlMessage in the protocol
• Added owner_revoke_preimage and owner_update_preimage wire functions for signature verification
• Added update_label method to EnrollmentStore
• Handler in agent verifies:
  • Sender is an enrolled owner with can_drive
  • Ed25519 signature over the preimage is valid
  • Timestamp is within ±5 min skew window

GitHub Actions CI

Enabled the existing (disabled) CI workflow:

• Triggers on push to rework/unify branch and v* tags
• Triggers on pull requests to rework/unify
• Runs cargo fmt, clippy, tests
• Builds release binary and uploads as artifact mymesh-linux-x86_64
• Does not publish to crates.io

ALPN mymesh-enroll/1 Documentation

Added documentation comment in enroll.rs explaining the wire protocol expectations for the mymesh-enroll/1 ALPN. The current EnrollRequest message (ticket + person_public_key_hex + person_id + mesh_name) matches the DESIGN protocol.

Clippy Fixes

Fixed pre-existing clippy warnings to ensure CI passes with -D warnings:

• mymesh-net: derivable_impls, dead_code, large_enum_variant
• mymesh-terminal: redundant_closure
• mymesh-session: borrowed_box, for_kv_map, while_let_loop
• mymesh-core: manual_repeat_n
• mymesh-cli: print_literal, format_in_format_args, derivable_impls, collapsible_if, if_same_then_else, min_max

Testing

• cargo build --workspace ✓
• cargo fmt --all -- --check ✓
• cargo clippy --workspace --all-targets -- -D warnings ✓
• cargo test --workspace ✓

Not Included

• Glass, holofs, Tor, pair/v1
• Does not break 24-word mymesh link or mymesh enroll

  

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.