vct/confine: sliver instantiation, update server version, settings and fixtures
iterative filter rules
confine/*.lua: sliver interfaces ...
vct: new VCT_NODE_TEMPLATE_URL