Complete ops-hub Inter-Hub bootstrap and close bootstrap workplans.

Extract bootstrap logic into src/ops_hub/bootstrap.py with dry-run support,
public hub discovery, and unit tests. Update the gate probe to accept public
hub listing (200 or 401), document dev commands and architecture, and archive
finished OPS-WP-0001 and OPS-WP-0002 workplans.

docs/bootstrap-runbook.md

@@ -47,6 +47,14 @@ operator_key_file="$(mktemp)"
 # source. Do not echo it into shared logs.
 ```
 
+Plan the bootstrap without mutations:
+
+```bash
+make interhub-bootstrap-dry-run \
+  IHUB_BASE=https://hub.coulomb.social \
+  IHUB_OPERATOR_KEY_FILE="$operator_key_file"
+```
+
 Run the attended bootstrap:
 
 ```bash
@@ -161,11 +169,12 @@ the authenticated UI.
 
 ## Current Live-Execution Blocker
 
-The repo-side helper and runbook are ready. The remaining blocker is an
-authenticated production execution lane:
+The repo-side helper, dry-run path, and runbook are ready. The remaining step is
+an operator-attended production run with:
 
 - an operator-provided `IHUB_OPERATOR_KEY_FILE`,
 - an OpenBao-materialized key on a trusted host, or
 - an explicitly approved deployment-side migration/bootstrap path.
 
-Until one of those is available, run only local validation and gate probes.
+Until one of those is available, run `make interhub-gate`, `make test`, and
+`make interhub-bootstrap-dry-run` for local validation.