Add is_identifier_registrar so only the production instance may mint hub UUIDs into repository files. Workstation hubs stay read/project caches until deterministic derivation lands. Also close RMGR-WP-0004-T05: register cutover is STATE-WP-0080-T02.