v1.0.8

Added

• doctor now hands the agent a runnable repair instead of a report. Every failing
  check carries a fix field with the exact command that clears it, and the
  plain-text output prints it indented under the check it belongs to. A passing check
  carries no fix, because a repair for something that works is noise. The daemon's
  doctor does the same, so the two stay symmetric.

  The hint check that appears when the daemon is unreachable now carries the tunnel
  command as a machine-readable field rather than burying it in prose, so an agent can
  run it rather than retype it.