Add fleet hostnaming

docs/TODO.md

@@ -17,6 +17,10 @@ flipped back for a secure/production build (consolidated as item #8):
   test target. Production needs CI/HSM signing.
 - `enable_kiosk=false` by default (CI may set true); `enable_stig=true`;
   `boot_splash=true`; NTP via DHCP→serving-host chrony.
+- **Hostname:** image is hostname-neutral (empty `/etc/hostname`,
+  `hostname-mode=default`); the serving dnsmasq's `fleet-namer` (`--dhcp-script`)
+  assigns a stable creative starship name per MAC (e.g. `nebula-vanguard-07`) via
+  DHCP option 12 + DNS A/PTR. Host picks it up on next DHCP renewal/reboot.
 
 What's working/verified vs awaiting bench is per-item below. Cross-cutting
 bench-verify checklist lives in `CLAUDE.md` → "Known bench-verify items".