Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

A provider now waits for a person before retiring more than three consumers
or half of what it holds, and deletes only when asked. The controller is that
person's way in: it keeps waiting and rejected sets as conditions, answers them
with retire approve|reject, lists and deletes retired consumers through the
provider's own tools on its machine, records each act in the hand-act log, and
probes for anything retired longer than thirty days (D11).

internal/link/standing_test.go

@@ -37,6 +37,7 @@ func TestTheControllerFollowsEveryProvidersStandingAndNothingElse(t *testing.T)
 	for subject, want := range map[string]string{
 		"mesh.mod.keycloak.event.provisioner.failing":   "keycloak",
 		"mesh.mod.postgres.event.provisioner.recovered": "postgres",
+		"mesh.mod.minio.event.provisioner.retirement":   "minio",
 		"mesh.mod.*.event.provisioner.failing":          "*",
 	} {
 		got, ok := ProvisionerEmitter(subject)
@@ -63,8 +64,11 @@ func TestTheControllerFollowsEveryProvidersStandingAndNothingElse(t *testing.T)
 			follows++
 		}
 	}
-	if follows != 2 {
-		t.Fatalf("the controller follows %d standing subjects, want failing and recovered", follows)
+	if follows != 3 {
+		t.Fatalf("the controller follows %d provider subjects, want failing, recovered and retirement (ADR 0230)", follows)
+	}
+	if !IsRetirement("mesh.mod.postgres.event.provisioner.retirement") || IsRetirement("mesh.mod.postgres.event.provisioner.failing") {
+		t.Fatal("a retirement word is not told from a standing")
 	}
 }