status(pxgate): M1 PASS in — M2 awaits orchestrator nixos-rebuild

M1 PASS @2026-06-13T13:00Z (Adversary, commit c96766e). Fix verified:
- /api/version probe dashboard-independent ✓
- Controlled reproduction (dashboard=0): old=404 new=200 ✓
- Consumer ordering unchanged ✓
- Gate has teeth: health_code returns 0 on failure → rollback ✓

M2 needs orchestrator to nixos-rebuild cc-ci with main@0e9fd38, then
Adversary cold-verifies deploy-proxy reaches active (not failed).
Exact nixos-rebuild command and verification steps in STATUS-pxgate.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

machine-docs/JOURNAL-pxgate.md

@@ -68,4 +68,4 @@ The new gate probes `https://traefik.ci.commoninternet.net/api/version`. If trae
 - Traefik running but broken: may return 5xx → not in health_ok=(200,) → unhealthy
 Confirmed in code: health_code() at line 253 returns 999 on curl failure. P1-neg holds by construction.
 
-**Next:** commit + claim M1.
+**Next:** commit + claim M1. → M1 PASS received @13:00Z. Awaiting orchestrator nixos-rebuild for M2.