feat(infra-options): add infra.host.class enum
Adds a required host classification (no default) so consumers can scope
fleet-level invariants and policy to the right host shape. Values cover
the current consumer fleet:
- nixos-server, nixos-pi, nixos-cache, nixos-microvm, nixos-iso
- darwin-workstation
Option is read by invariant test harnesses; system builds don't depend
on it.