Deny repeatedly unavailable discovery hosts

[BraydenLangley]

Summary

• add all 88 domains that served none of their claimed SHIP/SLAP capabilities in three cluster-side audit rounds
• retain the 12 partial or unstable providers for conservative follow-up
• verify the source-controlled denylist contains no duplicates
• install Node for audit workflow report processing

Audit evidence

• authoritative records: 512 (258 SHIP, 254 SLAP)
• distinct domains: 125
• live: 25
• repeated deny candidates: 88
• partial/unstable retained: 12
• audit run: https://github.com/p2ppsr/cars-node/actions/runs/33024650413

Validation

• npm test (26/26)
• bash -n scripts/k8s/audit-discovery-hosts.sh
• all 88 candidates present; 94 total configured entries; zero duplicates
• git diff --check