docs(agent): complete FUTURE #20 section; fix nomarchy-pull README line

FUTURE block with #20 deferred decision; README day-to-day list
matches pull = flake inputs only.

agent/BACKLOG.md

@@ -48,6 +48,24 @@ in [`docs/ROADMAP.md`](../docs/ROADMAP.md); map in
   Hyprland OOM blocker — see MEMORY.md before retrying (NOW#3 should
   also soften that blocker class).
 
+## FUTURE (decided deferred — not the agent queue head)
+
+Work we **intend** someday but explicitly **not** NEXT. Agents do not
+pick these unless Bernardo promotes one into NEXT/NOW.
+
+### 20. KVM runner → VM suite in CI `[human]`
+**Status (2026-07-10):** keep **eval-only** CI on the current Gitea
+stack (act_runner in docker-compose on the 4c/4 GB IONOS VPS). Nested
+KVM + RAM headroom on that host are a poor fit next to Gitea; full
+`checks.*` VMs stay local / promotion-time until a **separate**
+KVM-capable machine exists.
+
+**When ready:** register a second runner (host-mode nix + `/dev/kvm`,
+label `nix-kvm` — not the existing docker eval runner), then uncomment
+the `vm-checks` job in `.gitea/workflows/check.yml` (`runs-on: nix-kvm`,
+`nix flake check` + toplevel/HM builds). Do not enable the job until
+that label is online (Gitea queues forever otherwise).
+
 ## PROPOSED (agent suggestions — await human triage)
 
 *Agents: append here with a one-paragraph pitch (what/why/cost). Do not