claim(2w): WC8 + WC9 (FINAL gates) — resource-safety consolidation + stale-warm prune + docs/warm.md + --quick rollback proof

WC8: canonical.prune_stale (drop de-enrolled warm data + volumes) wired into the
nightly sweep + df log; consolidated evidence (DRONE_RUNNER_CAPACITY=MAX_TESTS
serialize; autoPrune drops --volumes so warm vols survive; cold teardown sacred;
warm excluded from D8 — no nix source ref). +1 unit (72 pass). WC9: docs/warm.md
documents the full warm/quick model; --quick rollback proof already proven live
(W2 FAIL restores exact known-good; WC4 PASS byte-identical snapshot). On PASS,
all WC1-WC9 (incl WC1.1/WC1.2) verified → DONE.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

runner/nightly_sweep.py

@@ -68,6 +68,12 @@ def sweep() -> int:
         ).returncode
         results[r] = rc
         print(f"nightly: {r} rc={rc} ({'green→canonical refreshed' if rc == 0 else 'red'})", flush=True)
+    # WC8 disk hygiene: drop warm data for de-enrolled canonicals; log the disk budget.
+    pruned = canonical.prune_stale()
+    if pruned:
+        print(f"nightly: pruned stale warm data for de-enrolled canonicals: {pruned}", flush=True)
+    df = subprocess.run(["df", "-h", "/"], capture_output=True, text=True)
+    print(f"nightly: disk / →\n{df.stdout.strip()}", flush=True)
     print("\n===== nightly sweep summary =====", flush=True)
     for r, rc in results.items():
         print(f"  {r}: {'PASS' if rc == 0 else 'FAIL'}", flush=True)