Verify hub install

Run hub verification from the release checkout:

./scripts/verify-hub-install.sh
./scripts/verify-fleet.sh --layer 1 --suite hub

Investigate failures before retrying an installation phase. The console and management APIs must be reached through the reviewed private management path and authenticated normally; do not expose management NodePorts on the public network.

Use the WireGuard client guidance for trusted operator access and verification for the safety levels. Hub teardown and cluster cleanup are destructive operations, not routine troubleshooting.