CI: remove k8s stages, fix the Docker-level pipeline green

Survey + fixes so the pipeline passes at the Docker level (no k8s).

- Remove k8s: drop the `sandbox-k8s` job (kind/Calico/--features k8s-tests) and the
  "Helm chart lints" gate step. release.yml was already k8s-clean.
- Rust job:
  - `cargo fmt --all` — fix pre-existing formatting drift (fmt --check was failing).
  - clippy -D warnings: fix 3 lib warnings (cm-brain sort_by_key→Reverse, cm-api
    fleet.rs doc list indentation, node_rules map_or→is_none_or).
  - Regenerate the .sqlx offline cache (was missing the cm-runtime run_loop test
    query → offline compile failed). DB-backed tests use testcontainers at runtime.
  - Set SQLX_OFFLINE=true on the rust + e2e jobs so query! macros compile against
    the committed cache deterministically (no DB needed at compile time).
- Frontend job:
  - Fix the 1 ESLint error (useAgentTelemetry: no setState-synchronously-in-effect;
    tag the slice with agentId + derive null on mismatch).
  - Fix 2 stale panel-params tests (`terminal` is a valid app id now; assert the
    current APP_IDS + use a genuinely-unknown id for the reject case).

Verified locally: fmt clean, clippy --all-targets -D warnings clean (offline),
frontend lint 0 errors, tsc clean, 86/86 frontend tests pass, build OK.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

frontend/src/lib/live/useClawmatesLive.ts

@@ -187,18 +187,19 @@ export function useLiveState<T extends TaxonomyType, S>(
 }
 
 /** The per-agent telemetry slice for the command-center metric band. Re-subscribes
- *  when the agent changes so the replayed last-known value paints immediately. */
+ *  when the agent changes so the replayed last-known value paints immediately. The
+ *  slice is tagged with its agentId and the getter returns null on mismatch — so we
+ *  never show a stale agent's metrics, without resetting state inside the effect. */
 export function useAgentTelemetry(agentId: string | null): TaxonomyPayload<"telemetry"> | null {
   const client = useClawmatesLive();
-  const [t, setT] = useState<TaxonomyPayload<"telemetry"> | null>(null);
+  const [slice, setSlice] = useState<{ agentId: string; data: TaxonomyPayload<"telemetry"> } | null>(null);
   useEffect(() => {
-    setT(null);
     if (!agentId) return;
     return client.on("telemetry", (d) => {
-      if (d.agentId === agentId) setT(d);
+      if (d.agentId === agentId) setSlice({ agentId, data: d });
     });
   }, [client, agentId]);
-  return t;
+  return slice && slice.agentId === agentId ? slice.data : null;
 }
 
 // --- synthetic generator (no backend) — ports the demo loop so the World/Observe