docs: correct hass hardware to x88 Pro physical box; sync CSG v1.3.2

- hass.windy.lan is a physical x88 Pro box (HAOS bare-metal, machine: green,
  CPE x88pro20, virtualization empty) — not PVE VM 180 (verified live 2026-08-18)
- Record CSG v1.3.2 (934f58c, W1N-118) deploy in maintenance runbook verify
  section and hosts live-tree section (backups now include w1n118)

runbooks/matrix-e2ee-update.md

@@ -2,10 +2,19 @@
 
 Update the custom **`matrix_e2ee`** integration on `hass.windy.lan`.
 
+- Last reviewed: 2026-08-18
+- Related systems: hass.windy.lan (HAOS, `machine: green`)
+
 Facts: [hosts/hass.windy.lan.md](../hosts/hass.windy.lan.md) (see § `matrix_e2ee` live tree)
 Source: `/home/windy/project/ha-matrix-e2ee` (development clone on workstation)
 Access: `ssh -o BatchMode=yes hassio@hass.windy.lan 'sudo -n -i <cmd>'`
 
+> **STOP conditions:** live state conflicts with the prerequisites below (e.g.
+> the source repo is not on the target state, the host manifest does not match
+> the source after rsync, or Core fails to start after restart) — stop and
+> record evidence; never bypass a failed check. Roll back per the Rollback
+> section when Core does not come back up.
+
 > **SSH config gotcha (verified 2026-08-18):** on the WSL client the systemwide
 > `/etc/ssh/ssh_config.d/20-systemd-ssh-proxy.conf` can be owned by `nobody`
 > (e.g. under the agent sandbox), making plain `ssh` fail with