// Package nodes owns the node catalogue (region, tier, status, weight) and
// the connect/disconnect flow. It communicates with node agents over mTLS
// gRPC to add and remove WireGuard peers, and exposes a versioned catalogue
// endpoint with 304 support so clients can cache node lists efficiently.
package nodes