Design for a kvm provider type: SSH-forwarded libvirt socket, multi-host config with placement.zone selecting the host, bridged networking with ARP/guest-agent IP discovery, operator-fetched distro cloud images cached in the host's storage pool, and a NoCloud seed ISO carrying the CRD's cloud-init user-data. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>