review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)

Put back by hand, it was found afresh and its copy became the hold's original, so a machine that
kept restoring it kept growing copies and lost which one was first. The first original now stays
the record's, content that differs is kept once beside it, and the note says a rollback means
unassigning the private network. Nothing is removed unless it is <wireguard dir>/<iface>.conf,
not a path the mesh writes, and not a link, which would leave the key-bearing target behind.

internal/apply/apply.go

@@ -518,7 +518,7 @@ func ApplyKeeping(
 			// configuration is retired — here, after the mesh's service applied, so in the apply
 			// of the take itself only if a peer is already through; otherwise a later apply
 			// retires it (novox/hq ADR 0119). What it did replaces what the take said of the file.
-			if o, did := retireFound(ctx, svc, &known, run, keep, report.Tunnel, time.Now().UTC()); did {
+			if o, did := retireFound(ctx, svc, d, &known, run, keep, report.Tunnel, time.Now().UTC()); did {
 				if tookAt >= 0 {
 					report.Outcomes[tookAt] = o
 				}