The whole-mesh-novox lab validation found three modules unresolvable: a provision-consuming module's minted login is mesh_<node>_<module>, and on novox `mesh_novox_only_office`(22)/`_de_spiegel`(21)/`_amqp_email_forwarder`(31) overflow the 20-char S3 access-key cap (ADR 0049). Added a short `slug` each (office/spiegel/emailfwd → 17/18/19 chars). Also fixed mailu's roundcube image: the pinned digest returns "manifest unknown" from ghcr; corrected to the real :1.9 digest. Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF