[process-manager PM-25] netscript pm CLI router + read verbs (+ degraded-local reads)

[rickylabs]

Summary

The netscript pm CLI group (OF-1): router + read verbs — status/logs/doctor/init/add/remove/explain — human + --json output equal to the contract schemas. Degraded-local reads defined (F-9): control plane unreachable → read verbs fall back to OsServicePort status/journal reads + KV registry snapshot, clearly marked source: os-layer (degraded); mutations refuse with a pointer at pm dev/service start — never silently stale.

Scope

• Archetype / area: packages/cli pm command group (Archetype 6)
• Part of Epic: NetScript Process Manager — bare-metal supervisor + admin console (pup/pm2 done right) #510
• Depends on: [process-manager PM-9] ProcessManagerContract v1: the 18-route table #520, [process-manager PM-11] Loopback transport + address-descriptor discovery + CLI degraded mode #522 · Blocks: PM-26, PM-28, PM-30

Design source

• research/design/d4-cli-admin-console-surfaces.md §1 (PMS-1) · plan.md §4 PM-25

Acceptance criteria

• gate: --json output validates against the contract schemas (same shapes, no CLI-only dialect)
• gate: degraded mode tested: reads work marked source: os-layer (degraded); mutations refuse with guidance
• gate: scoped check/lint/fmt wrappers green (--ext ts,tsx)

Non-scope

• Lifecycle verbs (PM-26); monitor (PM-28).

Drift / Debt

• none