Reliability hardening
- Automatically recovers the default local control service once when a Hook request finds it offline.
- Keeps arbitrary writes fail-closed and exposes only exact project-root /bin/bash start/status break-glass commands.
- Starts the managed service in a detached process group so it survives the launching shell session.
Validation: 110 tests passed, lint and diff checks passed, npm audit reports 0 vulnerabilities.