release: forjar 1.33.0-rc.1 (#647 + #648 on main)

[noahgift]

Release PR for the fleet-deploy candidate v1.33.0-rc.1 (PR #650). It batches two fixes on main plus the version bump:

• query_latency_under_50ms asserts one cold wall-clock sample — red under load, blocked the 1.33.0-rc.1 clean-room #647: query_latency_under_50ms takes the best of 5 samples, not one cold wall-clock sample (test-only; it blocked the rc clean-room).
• mount: an x-systemd.automount remount stacks a stale mount under forjar's, and check (tail -1) calls it converged #648: an x-systemd.automount remount no longer stacks a stale mount, and a stack is drift.
• Cargo.toml/Cargo.lock: 1.33.0-rc.1.

The rc tag is cut on main after this merges and main CI passes. No crates.io publish.

🤖 Generated with Claude Code