macOS mini host config changes drift automatically on a fleet-wide hash

The Scaleway Apple Silicon provider now rolls host config changes out to already-provisioned Mac minis automatically. Previously, firewall or script tweaks, fleet CIDR or tag changes, or rebaked tailscale or node_exporter binaries only propagated when the tart-kubelet binary changed, leaving operators to hand-apply fixes over SSH and force-patch every Machine’s status. The drift loop now hashes the rendered install scripts and embedded binaries fleet-wide, so any change to what the operator pushes reconciles on the next pass without disrupting running Tart VMs. The first reconcile after upgrade performs a one-time re-push as existing Machines migrate to the new fingerprint.