Move the route proxy into its module and run it from the trust image, on mesh-sdk's public membership (issues 1633, 1634, 1635)

A bundle is built only from its module's directory (ADR 0480 clause 4), so the proxy leaves
examples/ and the controller's internal/broker; the broker keeps no second copy of what the
proxy shares with mesh-sdk. The image and its Dockerfile go, and a test holds that only
build-agent declares one (clause 11).

modules/route-proxy/module.json

@@ -149,11 +149,18 @@
         "internal-acme-env"
       ]
     },
+    {
+      "id": "program-route-proxy",
+      "type": "archive",
+      "path": "${dir:state}/route-proxy",
+      "artifact": "server",
+      "unknown": "program"
+    },
     {
       "id": "server",
       "type": "container",
       "name": "route-proxy",
-      "artifact": "server",
+      "artifact": "trust",
       "network": "host",
       "env-file": [
         "${dir:state}/acme.env",
@@ -163,7 +170,8 @@
         "${dir:routes-dir}:/routes:ro",
         "${dir:acme-cache}:/acme",
         "${dir:ca-dir}:/ca:ro",
-        "${dir:mesh-state}/broker:/run/secrets/broker:ro"
+        "${dir:mesh-state}/broker:/run/secrets/broker:ro",
+        "${dir:state}/route-proxy:/opt/mesh:ro"
       ],
       "env": {
         "ROUTES": "/routes/mesh.json",
@@ -174,11 +182,15 @@
         "INTERNAL_ACME_CA_BUNDLE": "/ca/internal-root.crt",
         "MESH_BROKER_FILE": "/run/secrets/broker"
       },
+      "args": [
+        "/opt/mesh/route-proxy"
+      ],
       "restart-on": [
         "trust",
         "acme-env",
         "internal-trust",
-        "internal-acme-env"
+        "internal-acme-env",
+        "program-route-proxy"
       ],
       "logging": "journald",
       "health": {
@@ -195,14 +207,11 @@
     "artifacts": [
       {
         "name": "server",
-        "kind": "image",
-        "from": "Dockerfile",
-        "compiles": "examples/route-proxy",
-        "context": {
-          "seat": "git",
-          "repository": "novox/mesh-controller",
-          "ref": "main"
-        }
+        "kind": "bundle",
+        "language": "go",
+        "system": "alpine",
+        "from": "cmd/route-proxy",
+        "binary": "route-proxy"
       },
       {
         "name": "trust",
@@ -225,16 +234,6 @@
         "kind": "archive",
         "from": "files"
       }
-    ],
-    "on": [
-      {
-        "arg": "GO_BASE",
-        "image": "golang@sha256:6c2a5538f964f1c82f97ad14988bf05de100d922d159d0e398b54c7b0ca0c6c9"
-      },
-      {
-        "arg": "ALPINE_BASE",
-        "image": "alpine@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc"
-      }
     ]
   },
   "jails": [