Correct the record: a limitation that no longer exists, and one that was never written

The connectivity design still said a hub cannot be filtered — a gap recorded in
the morning and closed in the afternoon, left standing as though it were
current. Worse than a stale date: it would send somebody away from something
that works.

`restart-on` was described nowhere, including the part added today that lets a
service reflect a file another module put on the machine. A rule the host
enforces and no document mentions is a rule nobody can rely on.

And nine of fifteen design documents claimed an `updated:` older than their last
change, some by a week. That field is what cross-cutting views are generated
from, so it is not decoration.

03-DESIGN/01-to-be/10-delivery.md

@@ -5,7 +5,7 @@ code:
   - mesh-control internal/builder
   - mesh-control cmd/mesh-control (build, build --behind, push, status)
   - mesh-control internal/inventory/builds.go
-updated: 2026-08-28
+updated: 2026-08-31
 decisions:
   - 02-DECISIONS/0010-delivery.md
   - 02-DECISIONS/0009-modules-and-the-graph.md