Add `attach_bottled_agents_to_gateway()` as an `@abc.abstractmethod` on
`BottleBackend` and implement the first reconcile step across all three
backends: on a gateway cold boot, replace every already-running agent's
trusted CA with the freshly-minted gateway CA. Reconciling running bottles
is a backend responsibility (only the backend can enumerate its agents and
reach them — firecracker over SSH, docker/macOS over exec/cp), so making it
an abstract method keeps the fix cross-backend by construction.

The gateway rootfs is ephemeral, so a rebuild mints a new CA that every
running bottle distrusts (SSL verification fails — #510). This reconcile is
what distributes the fresh CA, so a routine gateway rebuild now doubles as a
free CA rotation. Per-bottle steps are best-effort: one unreachable or
malformed bottle is logged and skipped, never blocking the others.

Trigger — `Gateway.connect_to_orchestrator` now returns a cold-boot bool
(True when it actually (re)brought the gateway up, False when a healthy
current gateway was left untouched); each infra `ensure_running` gates the
reconcile on it, so it fires exactly on cold boot and never on an adopt.

Git-gate re-provision and egress-token restore fold into this same reconcile
on the same trigger in follow-up PRs (#516).

Refs #516. Addresses #510.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

@@ -507,0 +524,4 @@
+        fingerprint match is needed), which rotates the CA for free on every
+        bring-up. Git-gate re-provision and egress-token restore fold into this
+        same reconcile on the same trigger (see #516)."""
+

@@ -77,0 +139,4 @@
+            _push_ca_to_container(name, ca_pem)
+            reconciled += 1
+        except (OSError, ConsolidatedLaunchError) as exc:
+            log.info(f"CA reconcile skipped for {name}: {exc}")

@@ -92,0 +106,4 @@
+        input=ca_pem, capture_output=True, text=True, check=False,
+    )
+    if proc.returncode != 0:
+        raise ConsolidatedLaunchError(

@@ -92,0 +124,4 @@
+    try:
+        ca_pem = gateway.ca_cert_pem()
+    except GatewayError as exc:
+        info(f"bring-up reconcile skipped: gateway CA unavailable: {exc}")

@@ -92,0 +136,4 @@
+            _push_gateway_ca_to_agent(private_key, guest_ip, ca_pem)
+            reconciled += 1
+        except (OSError, ConsolidatedLaunchError) as exc:
+            info(f"CA reconcile skipped for {guest_ip}: {exc}")

@@ -101,0 +146,4 @@
+    try:
+        agents = list(enumerate_active())
+    except (EnumerationError, OSError) as exc:
+        info(f"CA reconcile skipped: {exc}")

@@ -0,0 +89,4 @@
+        "docker", "network", "inspect", "--format",
+        "{{range .Containers}}{{.Name}}\n{{end}}", network,
+    ])
+    if proc.returncode != 0: