feat: node workflow redesign — wizard auto-config, reset, MusicBrainz contact

Wizard (Electron):
- Auto-provisions node config (hub URL + username) from logged-in user
- node:start handles both cold start and restart of misconfigured daemon
- Waits for daemon to reach 'running', auto-links node key on hub
- probeNode accepts intermediate states for wizard progress feedback

Reset (meshbay-node reset):
- Unlinks node key from hub (DELETE /me/node_key, best-effort)
- Stops and disables daemon (systemctl --user disable --now)
- Erases ~/.config/meshbay, ~/.local/share/meshbay, ~/.local/state/meshbay

MusicBrainz contact:
- Resolved from owner's hub email instead of per-node roster config
- Removed musicbrainz_contact UI and WebRTC handshake field
- Removed set_musicbrainz_contact/musicbrainz_contact from roster

Node pairing:
- Added operator pairing banner on NodePage
- Added operator_paired flag to list_groups

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2 files changed, 5 insertions, 9 deletions

diff --git a/packages/meshbay-common/src/meshbay_common/adminop.py b/packages/meshbay-common/src/meshbay_common/adminop.py
index 19dfe8e..f96dd57 100644
--- a/packages/meshbay-common/src/meshbay_common/adminop.py
+++ b/packages/meshbay-common/src/meshbay_common/adminop.py
@@ -83,10 +83,8 @@ OP_VIDEO_ROOT = "video_root"
 # (media_cache is shared, not per-viewer), so an unsigned override would let
 # any member vandalize another show's metadata.
 OP_TMDB_OVERRIDE = "tmdb_override"
-# Music app (docs/musicbay.md §6) — same shape as OP_TMDB_CONFIG, minus a
-# secret: MusicBrainz needs no API key, only a rate-limited, self-identifying
-# client, so this only ever carries the User-Agent contact string, node-wide.
-OP_MUSICBRAINZ_CONFIG = "musicbrainz_config"
+# MusicBrainz contact is now the owner's hub email (musicbrainz.py) — no
+# signed config op needed. Only the per-group toggle remains.
 # Whether the node calls MusicBrainz *at all* for this group — per-group from
 # the start (unlike TMDB, which started node-wide and was split later once
 # the lesson was already learned once). Signed for the same reason as
diff --git a/packages/meshbay-common/src/meshbay_common/protocol.py b/packages/meshbay-common/src/meshbay_common/protocol.py
index d4e3ccd..651fe2d 100644
--- a/packages/meshbay-common/src/meshbay_common/protocol.py
+++ b/packages/meshbay-common/src/meshbay_common/protocol.py
@@ -109,11 +109,9 @@ class MNP:
     TMDB_SEARCH_RESP      = "tmdb_search_resp"       # node → client: candidate list (id, title, year, poster)
     TMDB_OVERRIDE         = "tmdb_override"          # operator → node: replace a show/movie's TMDB match
     TMDB_OVERRIDE_ACK     = "tmdb_override_ack"
-    # Music app (docs/musicbay.md) — same shape as the TMDB pair above, minus
-    # a credential: MusicBrainz read lookups need no API key, only a
-    # rate-limited, self-identifying client (§3 there).
-    MUSICBRAINZ_CONFIG = "musicbrainz_config"            # operator → node: contact string
-    MUSICBRAINZ_CONFIG_ACK = "musicbrainz_config_ack"    # node → everyone: new config (no secret)
+    # Music app (docs/musicbay.md). Contact is derived from the owner's hub
+    # email at login — no config/ack pair needed. Only the per-group toggle
+    # remains.
     MUSICBRAINZ_ENABLED = "musicbrainz_enabled"          # operator → node: enable/disable
     MUSICBRAINZ_ENABLED_ACK = "musicbrainz_enabled_ack"  # node → this group: new enabled state
     MUSIC_META_REQ = "music_meta_req"                    # client → node: metadata for a path