Recover from registry descriptor panics

[jaredjakacky]

Summary

• recover from CheckDescriber.Checks and CommandDescriber.Commands panics in registry read methods
• return ErrComponentPanicked without exposing recovered panic values
• add regression tests and update panic-containment docs
• update the commands example to show passive command metadata before command execution

Verification

• make verify