fix(audit): ultix-field renamed + access is ultixfield user with sudo [#446]

Device-side hostname, /etc/hosts, and Tailscale node renamed from
ultixfield to ultix-field to match the DNS canonical name (convention
match with ultix-streaming/ultix-offstage). Verified unprivileged path
is the ultixfield account with passwordless sudo.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

scripts/audit-fleet.sh

@@ -31,7 +31,6 @@ knel_alias() {
     case "$1" in
         homeassistant)     printf '%s' "pfv-bms" ;;
         umbrel)            printf '%s' "tsys-umbrel" ;;
-        ultixfield)        printf '%s' "ultix-field" ;;
         *)                 printf '%s' "$1" ;;
     esac
 }
@@ -51,6 +50,8 @@ classify() {
             printf '%s' "root vm" ;;
         tsys-ucs-01|tsys-ucs-02)
             printf '%s' "root vm" ;;
+        ultix-field)
+            printf '%s' "ultixfield vm" ;;
         pfvsvrpi)
             printf '%s' "localuser vm" ;;
         subopi3|subopi-dev-3|subopi-dev-4)