docs(agent): CI green (run #58) — item 20 reduced to the KVM-runner stretch

First successful run of .gitea/workflows/check.yml on the live
act_runner: the eval tier is confirmed end to end. What remains of
item 20 is optional infra ([human]): a KVM/nix host-mode runner to
unlock the commented vm-checks job.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

agent/BACKLOG.md

@@ -22,19 +22,6 @@ next, in what order*.
 
 ## NOW
 
-### 20. Confirm the first CI run goes green `[human]`
-~~Runner registration~~ — resolved: the runner was alive all along
-(gitea/act_runner via docker-compose, `ubuntu-latest` label); the
-workflow was in `.forgejo/workflows/`, which **Gitea** ignores — moved
-to `.gitea/workflows/`. Remaining: watch the first real run at
-https://git.bemagri.xyz/bernardo/Nomarchy/actions — the eval job's
-container recipe is inherited from the legacy repo but this flake's
-eval is new territory (memory headroom of the runner container is the
-likely failure mode; the legacy repo OOM'd on heavy evals). **Stretch
-(unchanged):** a second runner on a host with `/dev/kvm` + nix (label
-`nix-kvm`, host mode) unlocks the workflow's commented `vm-checks` job
-— the VM suite + real builds in CI (upgrades half of item 14 free).
-
 ### 4. btrfs-assistant segfault — attempt the nixpkgs override fix
 ROADMAP § Snapshot browse/restore. btrfs-assistant 2.2 crashes in
 `libbtrfsutil.so.1.4.0` (ABI mismatch, confirmed not a VM artifact); the
@@ -147,6 +134,14 @@ human. Plus the fast-lane note for security bumps. Note the current
 runner is eval-only (no KVM) — a green bump run guards eval, not the VM
 suite, until item 20's stretch runner exists.
 
+### 20. KVM runner → VM suite in CI `[human]`
+The remaining stretch of the CI item — checks-on-push is live and
+**green** (run #58; runner = gitea/act_runner docker, eval tier).
+Register a second runner on a host with `/dev/kvm` + nix (host-mode
+label `nix-kvm`), then an agent uncomments the workflow's `vm-checks`
+job: the `checks.*` VM suite + real toplevel/HM builds on every push
+(also upgrades item 14's bump gate from eval-only to the full suite).
+
 ### 15. Display profiles — docked/undocked switching
 ROADMAP § Display / monitor management, remaining: true profile
 switching of the *same* outputs (multi-layout toggles, beyond