feat/retired-consumers
main
The controller now derives a subscription to provisioner.retirement; the first user list the installer carries must match it, or the genesis controller is refused the subject its composition expects.