Mac fleet host configuration now automatically drifts on any fleet-wide change

The macOS host bootstrap drift loop for the Scaleway Apple Silicon fleet now detects changes to any rendered install script or embedded binary (firewall, VM networking, Tailscale, node_exporter, tart-kubelet) and re-pushes the host config to already-provisioned Mac minis automatically. This removes the need to manually patch or force-update machines after fleet-wide fixes, CIDR/tag changes, or binary updates, and existing machines migrate cleanly on the first reconcile after the chart upgrade.