/watch reconciler hub, `boat pool` verb, and token rotation

Publishes reconciler observations to /watch, adds boat pool verb, and implements token rotation with hard-expiry and SIGHUP reload.