chore: strip dangling sibling refs from Cargo.toml descriptions

Opus TOML audit found 7 crates whose Cargo.toml description fields
advertised sibling crates that don't exist in the workspace:

- kei-auth-magiclink, kei-auth-webauthn → mentioned kei-auth-{github,microsoft}
  (workspace has only google + apple + magiclink + webauthn)
- kei-notify-discord → mentioned kei-notify-email (workspace has telegram /
  discord / slack / sms only)
- kei-net-wireguard, kei-net-ipsec → mentioned kei-net-tailscale (workspace
  has wireguard / openvpn / ipsec only)
- kei-git-forgejo → mentioned kei-git-keigit (workspace has forgejo / gitea /
  gitlab / bitbucket)
- kei-compute-linode → mentioned kei-compute-hetzner (Hetzner removed per
  rules/projects/project-vortex.md after TSPU blocks)
- kei-provision/Cargo.toml description + metadata → both mentioned Hetzner

Updated each description to mention only actually-existing siblings. cargo
metadata consumers, IDE tooltips, and any future crates.io publication will
no longer carry misleading sibling lists.

cargo check --workspace clean (only pre-existing warnings unrelated to this
change). Description-only metadata edits — zero functional impact.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

_primitives/_rust/kei-auth-magiclink/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-auth-magiclink"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "AuthProvider impl for passwordless email magic-link tokens (HMAC-SHA256, stateless). Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and kei-auth-{google,github,microsoft,apple}."
+description = "AuthProvider impl for passwordless email magic-link tokens (HMAC-SHA256, stateless). Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and kei-auth-{google,apple,webauthn}."
 authors.workspace = true
 license.workspace = true
 

_primitives/_rust/kei-auth-webauthn/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-auth-webauthn"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "WebAuthn passkey AuthProvider impl for kei-runtime-core (Wave 7 atomar). Wraps webauthn-rs 0.5; stateless ceremony APIs (registration + authentication). Sibling of kei-auth-{google,apple,github,microsoft}."
+description = "WebAuthn passkey AuthProvider impl for kei-runtime-core (Wave 7 atomar). Wraps webauthn-rs 0.5; stateless ceremony APIs (registration + authentication). Sibling of kei-auth-{google,apple,magiclink}."
 license.workspace = true
 authors.workspace = true
 

_primitives/_rust/kei-compute-linode/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-compute-linode"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "ComputeProvider impl for Linode (Akamai Cloud) v4 API. Wave 2 atomar — sibling of kei-compute-hetzner. Honors LINODE_TOKEN env ref per RULE 0.8."
+description = "ComputeProvider impl for Linode (Akamai Cloud) v4 API. Wave 2 atomar — sibling of kei-compute-{vultr,digitalocean,baremetal}. Honors LINODE_TOKEN env ref per RULE 0.8."
 authors.workspace = true
 license.workspace = true
 

_primitives/_rust/kei-git-forgejo/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-git-forgejo"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "GitBackend impl for public Forgejo (Gitea-compatible /api/v1). Wave 5 atomar; sibling of kei-git-keigit (private)."
+description = "GitBackend impl for public Forgejo (Gitea-compatible /api/v1). Wave 5 atomar; sibling of kei-git-{gitea,gitlab,bitbucket}."
 authors.workspace = true
 license.workspace = true
 

_primitives/_rust/kei-net-ipsec/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-net-ipsec"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Wave 9 — IPsec NetworkMode impl for kei-runtime-core via strongSwan / swanctl shell-out. Public-IP path; sibling of kei-net-tailscale (private-only) and kei-net-wireguard (private-only)."
+description = "Wave 9 — IPsec NetworkMode impl for kei-runtime-core via strongSwan / swanctl shell-out. Public-IP path; sibling of kei-net-wireguard (private-only) and kei-net-openvpn."
 license.workspace = true
 authors.workspace = true
 

_primitives/_rust/kei-net-wireguard/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-net-wireguard"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Wave 9 — WireGuard NetworkMode adapter via wg-quick + wg shell-out (private mesh, is_public=false). Sibling of kei-net-tailscale; glued by kei-runtime-core::traits::network."
+description = "Wave 9 — WireGuard NetworkMode adapter via wg-quick + wg shell-out (private mesh, is_public=false). Sibling of kei-net-{openvpn,ipsec}; glued by kei-runtime-core::traits::network."
 authors.workspace = true
 license.workspace = true
 

_primitives/_rust/kei-notify-discord/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-notify-discord"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "NotifyChannel impl for Discord webhooks. Wave 8 atomar; sibling of kei-notify-email and kei-notify-slack."
+description = "NotifyChannel impl for Discord webhooks. Wave 8 atomar; sibling of kei-notify-{telegram,slack,sms}."
 authors.workspace = true
 license.workspace = true
 

_primitives/_rust/kei-provision/Cargo.toml

@@ -3,7 +3,7 @@ name = "kei-provision"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Unified VPS provisioner — one CLI for Hetzner / Vultr / (future) AWS / DO / Linode. Supersedes provision-hetzner.sh + provision-vultr.sh."
+description = "Unified VPS provisioner — one CLI for Vultr / Linode / DigitalOcean / baremetal. Supersedes provision-vultr.sh."
 authors.workspace = true
 license.workspace = true
 
@@ -27,6 +27,6 @@ tempfile = { workspace = true }
 
 [package.metadata.keisei]
 backend = "external-cli"
-description = "Shells out to `hcloud` (Hetzner) or `vultr-cli` (Vultr). Parses JSON output. Honors HCLOUD_TOKEN / VULTR_API_KEY env refs per RULE 0.8."
+description = "Shells out to `vultr-cli` (Vultr) / `linode-cli` (Linode) / `doctl` (DigitalOcean). Parses JSON output. Honors VULTR_API_KEY / LINODE_TOKEN / DIGITALOCEAN_TOKEN env refs per RULE 0.8."
 authors = ["Denis Parfionovich <parfionovich@keilab.io>"]
-supersedes = ["provision-hetzner.sh", "provision-vultr.sh"]
+supersedes = ["provision-vultr.sh"]