fix: address review — verify-job auth+retry, reflow llms.txt, changelog flag

- nightly verify: ghcr login + 3-attempt retry per tag; a tripwire
  that itself flakes trains people to ignore red
- llms.txt: one backtick span per command, no line-wrapped flags
- CHANGELOG: --add-host host.docker.internal:host-gateway, not the
  truncated form

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: lroolle

.github/workflows/nightly-images.yml

@@ -208,15 +208,32 @@ jobs:
     needs: [resolve-versions, build-base, build-rust]
     runs-on: ubuntu-latest
     steps:
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
       # Outcome tripwire: assert the artifacts exist, not that the build
       # steps exited 0. A green run with an unpullable tag is a lie.
+      # Small retry absorbs registry eventual-consistency right after push —
+      # a tripwire that itself flakes trains people to ignore red.
       - name: Assert all nightly tags resolve
         run: |
           set -euo pipefail
           stamp="${{ needs.resolve-versions.outputs.stamp }}"
           for tag in nightly "nightly-${stamp}" nightly-rust "nightly-${stamp}-rust"; do
-            docker manifest inspect "ghcr.io/thevibeworks/deva:${tag}" >/dev/null
-            echo "ok: ${tag}"
+            for attempt in 1 2 3; do
+              if docker manifest inspect "ghcr.io/thevibeworks/deva:${tag}" >/dev/null; then
+                echo "ok: ${tag}"
+                continue 2
+              fi
+              echo "attempt ${attempt} failed for ${tag}; retrying in 10s" >&2
+              sleep 10
+            done
+            echo "error: ghcr.io/thevibeworks/deva:${tag} does not resolve after push" >&2
+            exit 1
           done
 
   summary:

CHANGELOG.md

@@ -36,7 +36,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `HTTP(S)_PROXY` forwarded to `docker build` via BuildKit predefined
   ARGs with localhost (and authenticated `user:pass@localhost`) proxies
   rewritten to `host.docker.internal` plus an explicit
-  `--add-host host-gateway` mapping for native Linux Engine; npm version
+  `--add-host host.docker.internal:host-gateway` mapping for native
+  Linux Engine; npm version
   resolution goes straight to registry.npmjs.org instead of honoring
   `.npmrc` mirror overrides, degrading to warn-and-fallback on registry
   outages; proxy credentials are redacted from all build/version logs

llms.txt

@@ -6,10 +6,11 @@
 
 deva.sh is a single entry point installed on the host; agents run inside
 `ghcr.io/thevibeworks/deva` images (`:latest`, `:rust` for stable, `:nightly`,
-`:nightly-rust` refreshed daily). Agent-level permission prompts are disabled by
-design (`claude --dangerously-skip-permissions`, `codex
---dangerously-bypass-approvals-and-sandbox`, `gemini --yolo`, `grok
---always-approve`) — isolation comes from Docker, not permission theater. Auth
+`:nightly-rust` refreshed daily). Agent-level permission prompts are disabled
+by design — isolation comes from Docker, not permission theater:
+`claude --dangerously-skip-permissions`,
+`codex --dangerously-bypass-approvals-and-sandbox`,
+`gemini --yolo`, and `grok --always-approve`. Auth
 lives in per-agent config homes under `~/.config/deva/` with OAuth (default) or
 API-key modes per agent; nothing crosses the host boundary except what you
 mount. Known sharp edge: mounting `/var/run/docker.sock` is host-root with