Worker Control Center

Admin-only inventory and bounded lifecycle controls. Targets are resolved from the registered fleet; arbitrary service, container, command and path names are never accepted.