feat(clan): re-enable dm-pull-deploy via forked clan-community 🌊

Stage 4e, take 2. Point the clan-community input at our fork's branch
that sanitizes machine.name for data-mesher's file-name validator
(upstream PR: clan/clan-community#25). Revisit this pin once merged.

- flake.nix: clan-community.url → fork + fix branch
- flake-modules/clan.nix: re-adds meta.domain = "clan",
  inventory.instances.data-mesher (sunken-ship bootstrap, both default),
  inventory.instances.dm-pull-deploy (sunken-ship push, both default
  action="switch"), and clanHostsModule that puts /etc/hosts entries
  for <host>.clan → each machine's ZT IPv6 so libp2p multiaddr
  resolution works without a clan-domain DNS server.
- Generator vars for data-mesher + dm-pull-deploy signing keys were
  regenerated on sunken-ship (data-mesher isn't packaged for
  aarch64-darwin, so clan vars generate runs on Linux).

vars/per-machine/phantom-ship/data-mesher-node-identity/identity.cert/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:tWPgk97Zn1F81EuITs0GWe/hycZGreo0S1oYemuOXxpqdbq/kwKwdZydSxs4cZfXOVzf9nL8V8R01/prbfAMFBJl/OgWW5qFqv5Mj7mBDZWYOrDVW481hhkMuZGzlc+2f2Q6Enmugw1tKQa277KV6t9lZ1mrPYvzVqXh1ZJm4Ez8FJidwwmHkHxAeK8q1AkMXZKMNBBvt86VfTFmWlkhav53CUpGIvchdyAPw8c97sGTTd58L7r9xImR2ZtSgXl237q1NZC40+oUDMS6QB+l9JtAPus2BROQ84U0zImcLEuDh+cHGUnlowXPRvTL,iv:3E+iqOJy7mKBQE40doDEhlVS7yU6tsB2W99defE48gc=,tag:d0SnUTshXNewGECH2sTuJw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age18gtjh28qxeltg2r2tzxwl096crkqkqk8tjhersyf7mzdsddady7qs34x0m",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Z21ES1dTMmZYN3pWTkpo\nY1dBVTY5K1UrT09xNnBWNWhTcWRQSHpyeDBzClBSRVJDeWxtM2ZjWHllWXV5ZHFM\nQ3BYbmhhUTF2dDlwYkRFbTBneGxoVFEKLS0tIHhvQWpTSGJvN2EvM29aenQxTG5L\nZUsvaUM0YWN6czUxM2FHWnhlL3pZREUKF3sKxQqPebE5DZQgYeChHlWcf89peqD1\nVTaZP8CDmLPxxXMOPt31PgOPwP36CHrYM12Fil3lXY31tM7fGw1hVA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1g6y8gvcampqj5y3yzdajke2h5n7k6ckdg6a424cghy5325px7cmqjmmd28",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUHBUQnZzc1ZXKzl5RlpG\ndWpKcEIrWE5RS01kOHZVWFNsNjFML3VwT21zCk1KV01JaWI4cHVVR1pOTCtPUU5n\nbVJPbWZmUzNTZ3dETWwwb3Nvb2t4MGsKLS0tIGFKRlB4ZzAvZEpWemZqYjJlT2pC\nOEhSYXRZOE9oUkRqVzUrWUxpK3dwb28KMrhCm/S1zF8ZqSkKE/dy2A/xiFwBOs0Y\nGtl9HJEAA/xx9gHAy7cuGe3sV8KLSySFUbdL3UE7OhqtuGJwt67hGg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-20T17:57:26Z",
+		"mac": "ENC[AES256_GCM,data:8W+KPrzQwbdXi+haUjvYjVjfN+/WmlQso4imTBI9RBYLJwX9e//sfvq4Jd2HOplb8lfIvPqbMUELKma95J3qbSmBTuU6JHP07D53KRz50ZfVH+f9U9yo35nmhLQzlSWAZY4mHF23eq8pyt2EJ5b0M1TLs5bG00FmjWG1ir8avLU=,iv:I6rMyCjLUCRwZOX2YiETgb73wlRhpkPA+8psgfWZnR0=,tag:0wieM5ylopWzr3g9QUfZzg==,type:str]",
+		"version": "3.12.2"
+	}
+}