Control remote fleet workers over SSH with user, host, and key path

NS1 is marchon@70.88.205.138 using ~/.ssh/id_ed25519. Private key
bytes stay off git. Spawn, health, and kill go through ssh; remote
workers bind loopback only.

packages/verae-fleet/machines.json

@@ -12,10 +12,13 @@
     {
       "id": "ns1",
       "title": "NS1.GEORGELAMBERT.ORG",
-      "kind": "agent",
+      "kind": "ssh",
       "host": "70.88.205.138",
-      "agentPort": 3851,
-      "enabled": false,
+      "user": "marchon",
+      "sshPort": 22,
+      "identityFile": "~/.ssh/id_ed25519",
+      "remoteDir": "~/verae-fleet-runtime",
+      "enabled": true,
       "capacity": 24,
       "roles": [
         "tree-node",
@@ -24,7 +27,21 @@
         "job-poller",
         "webhook-deliver"
       ],
-      "notes": "Run `node src/agent.js` on NS1, then enable this machine to spread tree-node / WORM capacity. Agent port is loopback-plus-SSH-tunnel or private LAN — do not publish NATS."
+      "notes": "SSH as marchon with ~/.ssh/id_ed25519. Workers bind 127.0.0.1 on NS1; control plane probes via ssh+curl. Private key is never stored in git."
+    },
+    {
+      "id": "lan-134",
+      "title": "70.88.205.134",
+      "kind": "ssh",
+      "host": "70.88.205.134",
+      "user": "marchon",
+      "sshPort": 22,
+      "identityFile": "~/.ssh/id_ed25519",
+      "remoteDir": "~/verae-fleet-runtime",
+      "enabled": false,
+      "capacity": 12,
+      "roles": ["tree-node", "archive-worm"],
+      "notes": "Same user/key as NS1. Enable after confirming node is on PATH."
     }
   ]
 }