docs,config: aggiorna AGENTS.md, config.example, HOST-SETUP.md, checklist faseA e fix vari orchestrator (workstation, build, job, wait, winrm, test)

config.example.toml

@@ -4,6 +4,14 @@
 # Environment variables (CI_ROOT, CI_TEMPLATES, CI_BUILD_VMS, CI_ARTIFACTS,
 # CI_KEYS, CI_VMRUN_PATH, CI_SSH_KEY_PATH, CI_GUEST_CRED_TARGET) override
 # anything set here.
+#
+# IMPORTANT (TOML rule): top-level keys must appear BEFORE any [section] header.
+# Keys placed after a [section] belong to that section, not to the root table.
+
+# Top-level orchestrator settings.
+vmrun_path        = "C:/Program Files (x86)/VMware/VMware Workstation/vmrun.exe"
+ssh_key_path      = "F:/CI/keys/ci_linux"
+guest_cred_target = "BuildVMGuest"
 
 # --------------------------------------------------------------- Windows host
 [paths]
@@ -24,7 +32,3 @@ keys       = "F:/CI/keys"
 # Phase C hook: backend selector. Only "workstation" is implemented in Phase A.
 [backend]
 type = "workstation"
-
-vmrun_path        = "C:/Program Files (x86)/VMware/VMware Workstation/vmrun.exe"
-ssh_key_path      = "F:/CI/keys/ci_linux"
-guest_cred_target = "BuildVMGuest"