[GEMINI-HARDEN-01] Replace hard-coded fleet inventory with repo-native config

Add fleet.inventory and fleet.path_contracts to config.yaml:
- Central source of truth for IPs, ports, roles, remote paths
- Introduce get_config_path(), load_fleet_inventory(), get_path_contract()
- Updated fleet_llama.py, self_healing.py, telemetry.py, agent_dispatch.py,
  skill_installer.py to read from config instead of hard-coded dicts/paths
- Documented inventory contract and override mechanism in scripts/README.md

Scripts retain forward-compatible fallback defaults for backwards compatibility.

Closes #433

scripts/self_healing.py

@@ -20,14 +20,42 @@ if SCRIPT_DIR not in sys.path:
     sys.path.insert(0, SCRIPT_DIR)
 
 from ssh_trust import VerifiedSSHExecutor
+import yaml
 
 # --- CONFIGURATION ---
-FLEET = {
-    "mac": {"ip": "10.1.10.77", "port": 8080},
-    "ezra": {"ip": "143.198.27.163", "port": 8080},
-    "allegro": {"ip": "167.99.126.228", "port": 8080},
-    "bezalel": {"ip": "159.203.146.185", "port": 8080}
-}
+
+def get_config_path():
+    return os.environ.get('TIMMY_CONFIG') or os.path.join(
+        os.path.dirname(os.path.abspath(__file__)), '..', 'config.yaml'
+    )
+
+def load_fleet_inventory():
+    """Return dict {{host: {{ip, port, role, remote_root, capabilities}}}} from config.yaml,
+    or approved fallback defaults."""
+    try:
+        with open(get_config_path(), 'r') as f:
+            cfg = yaml.safe_load(f)
+        inv = cfg.get('fleet', {}).get('inventory', {})
+        if inv:
+            return inv
+    except Exception:
+        pass
+    return {
+        "mac": {"ip": "10.1.10.77", "port": 8080, "role": "hub"},
+        "ezra": {"ip": "143.198.27.163", "port": 8080, "role": "forge"},
+        "allegro": {"ip": "167.99.126.228", "port": 8080, "role": "agent-host"},
+        "bezalel": {"ip": "159.203.146.185", "port": 8080, "role": "world-host"},
+    }
+
+def get_path_contract(key, default):
+    """Return path contract from config.yaml."""
+    try:
+        with open(get_config_path(), 'r') as f:
+            cfg = yaml.safe_load(f)
+        return cfg.get('fleet', {}).get('path_contracts', {}).get(key, default)
+    except Exception:
+        return default
+FLEET = load_fleet_inventory()  # dict {host: {{"ip":..,"port":..,"role":..}}}
 
 class SelfHealer:
     def __init__(self, dry_run=True, confirm_kill=False, yes=False, executor=None):