Retire Inventory Nodes

Retire unassigned nodes: move them to the terminal DECOMMISSIONING state.

Nothing is deleted — the node row and its assignment history stay. A node still holding a live assignment is refused: detach it first. A retired node carries no cluster, so there is nothing to scope against and this needs a broad inventory:update grant. dryRun validates without writing.