mesh-grants: ask the controller's root-free verb and wake on its condition events, so a verified sender is composed (issue 1945)

The part composed every membership with no root-free input, so telegram's verified-sender was dropped and the membership held as a shadow
difference. It now asks mesh-controller.root-free for the machines a composition needs, per pass, failing closed and said once, and wakes
on root-not-free condition-raised and condition-cleared.

modules/mesh-grants/module.json

@@ -13,10 +13,15 @@
     "node-engine.have",
     "mesh-vault.bus-accounts"
   ],
+  "consumes": [
+    "mesh-controller.condition-raised",
+    "mesh-controller.condition-cleared"
+  ],
   "invokes": [
     "nats.nats_streams",
     "nats.nats_user_can",
-    "nats.nats_users"
+    "nats.nats_users",
+    "seat:mesh-controller.root-free"
   ],
   "emits": [
     "asserted",