#36178 cmux-vm: approve cloud-native-a6d444a (cmux-tui a6d444aa) for development, staging and production

Approves the Cloud Native image from #36123's pin in the cmux-vm Worker's VM_BOOT_IMAGES: cloud-native-a6d444a, revision ci-41966716765-2, snapshot sh-580bb95a3a874b22a472f0761983ba30 (bake run https://github.com/manaflow-ai/cmux/actions/runs/41966716765, --native-receiver, smoke passed 30 checks).

• Development and staging: appended to the list.
• Production: first entry, so the CI product smoke boots it. cloud-native-91d3ea0 and cloud-native-b1f8fc4 stay listed for rollback; cloud-native-f7b9c57 drops off.

Why: a6d444aa carries local receiver admission (#36014). When cmux-platform sends admit_until (platform#827, which needs ownerExpiresAt from #36098, merged), an unanswered policy read keeps open streams instead of closing every stream and peer. Kill switch: CLOUD_RECEIVER_ADMIT_MS=0 on the platform.

Production gets this directly (Leo: "If I tell you to do something, don't stick it into dev. Put it into prod. There's nobody else using prod.").

Changelog

none

Agent session: agent session

🤖 Generated with Claude Code

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Approves cloud-native-a6d444a (cmux-tui a6d444aa) for the cmux-vm Worker. The image is appended to the development and staging boot lists and becomes the first production entry; cloud-native-b1f8fc4 stays listed for rollback.

• Production previously listed cloud-native-91d3ea0 first, but GET /v1/vm-images sorts ids and the CI product smoke boots the first entry, so cloud-native-91d3ea0 would have shadowed a6d444a; it is dropped. Rolling back to cloud-native-91d3ea0 is a revert of this PR.
• Local receiver admission means an unanswered policy read keeps open streams instead of closing every stream and peer when admit_until is sent.
• Kill switch: CLOUD_RECEIVER_ADMIT_MS=0 on the platform.