After self-hosting, wire NuGet: create HOSTED/PROXY/GROUP, configure sources and nuget.config, smoke-test pack/push/restore, and fix 401 and NU1101.