Module host_seed 

Governed Seed operations outside the cog lifecycle: firmware upgrade and writes_gated recovery, each gated as workload.install with kind seed-firmware and chained with the backup summary.