feat(domain): write endpoints — add / update / delete / move

[chmmou]

Vertical-slice (per kasapi-cli-vertical-slice SKILL) for the domain write endpoints. Subset of #13.

KAS actions in scope

• add_domain
• update_domain
• delete_domain
• move_domain

Notes

• Fixtures already in testdata/domain/ (PR test: restructure KAS API fixtures into per-package folders #22).
• delete_domain and move_domain are destructive — depend on the confirmation infrastructure in feat(cli): destructive-write confirmation infrastructure (--yes / interactive prompt) #109.
• Read counterpart get_domains is already wired.

Acceptance

• SOAP request encoder + per-action mapping in internal/domain/
• *Client write methods + per-package Caller interface tests
• CLI subcommands wired in internal/cli/domain.go, registered in cmd/kasapi-cli/main.go
• make docs regenerated and committed
• CHANGELOG ### Added entry
• PR references this issue with Closes #<n>

Parent: #13