[GEMINI-HARDEN-01] Replace hard-coded fleet inventory with repo-native config

Add fleet.inventory and fleet.path_contracts to config.yaml:
- Central source of truth for IPs, ports, roles, remote paths
- Introduce get_config_path(), load_fleet_inventory(), get_path_contract()
- Updated fleet_llama.py, self_healing.py, telemetry.py, agent_dispatch.py,
  skill_installer.py to read from config instead of hard-coded dicts/paths
- Documented inventory contract and override mechanism in scripts/README.md

Scripts retain forward-compatible fallback defaults for backwards compatibility.

Closes #433

scripts/README.md

@@ -56,5 +56,61 @@ python3 scripts/fleet_llama.py status
 python3 scripts/architecture_linter_v2.py
 ```
 
+
+## Fleet Inventory Contract
+
+The fleet inventory is defined in `timmy-config/config.yaml` under the `fleet:` key. All [OPS] scripts read this data at runtime, eliminating hard-coded IPs and paths.
+
+### `fleet.inventory` — Per-Host Definition
+
+```yaml
+fleet:
+  inventory:
+    <hostname>:
+      ip: <string>           # Public or private IP address
+      port: <int>            # SSH target port (typically 22)
+      role: <string>         # Logical role (hub, forge, agent-host, world-host)
+      remote_root: <path>    # Remote root directory for Hermes operations
+      capabilities: [...]    # Feature tags the host supports
+```
+
+Each host entry exposes: `ip`, `port`, `role`, `remote_root`, `capabilities`. The `capabilities` tag is freeform but standardized across the fleet (e.g., `gateway`, `orchestrator`, `forge`, `agent-host`, `llm-host`, `world-host`).
+
+### `fleet.path_contracts` — Path Abstractions
+
+```yaml
+fleet:
+  path_contracts:
+    hermes_agent_local:  ../hermes-agent     # Path to local hermes-agent repo (relative to timmy-config)
+    hermes_remote:       /opt/hermes         # Remote Hermes root on fleet nodes
+    skills_remote:       /opt/hermes/skills  # Remote skills directory
+```
+
+All scripts reference paths via `get_path_contract(key, default)` or `get_remote_root()` helpers. This centralizes path management across local (mac) and remote wizards.
+
+### Override Mechanism
+
+Set the `TIMMY_CONFIG` environment variable to point at an alternate `config.yaml`:
+
+```bash
+export TIMMY_CONFIG=/path/to/alternate/config.yaml
+python3 scripts/fleet_llama.py status
+```
+
+Without `TIMMY_CONFIG`, scripts auto-resolve `timmy-config/config.yaml` relative to their `scripts/` directory.
+
+### Fallback Defaults
+
+If `config.yaml` is missing or the `fleet:` section is absent, scripts fall back to the canonical production fleet:
+
+| Hostname | IP                | Role          |
+|----------|-------------------|---------------|
+| mac      | 10.1.10.77        | hub           |
+| ezra     | 143.198.27.163    | forge         |
+| allegro  | 167.99.126.228    | agent-host    |
+| bezalel  | 159.203.146.185   | world-host    |
+
+Fleet eviction occurs through config changes, not code edits.
+
 ---
 *Built by Gemini — The Builder, The Systematizer, The Force Multiplier.*