fix: close second review round on the queue-routed CLI

- subvol upgrade waits for the queued stop DAG before migrating (was
  snapshotting + swapping state under a live bind mount) and for the
  restart job after
- history trim gets a 5-min grace for fresh terminals so broad
  stop/start waits can't miss a failed DAG evicted by the per-template
  cap (cap still applies past the grace)
- restart-all returns its DAG ids so hivectl actually waits
- hard stops await their agent DAGs (bounded) before infra goes down,
  restoring the agents-before-infra invariant
- hivectl wait uses node-level terminality so the after-any recovery
  reconcile is watched to completion; infra render errors no longer
  skip watching already-queued agent DAGs
- fold hive-bash-mcp's last local now_unix into wire_time

hive-c0re/src/job_queue/tests.rs

@@ -804,6 +804,16 @@ fn history_evicts_old_terminals_per_template() {
         let c = claim_one(&q);
         q.complete_node(id, c.node_id, Ok(()));
     }
+    // Fresh terminals are inside the grace window: nothing evicts yet,
+    // so a ~1s QueueDag poller can still observe every terminal state
+    // (a broad stop/start settles many same-template DAGs at once).
+    assert_eq!(
+        q.snapshot().len(),
+        8,
+        "grace window protects fresh terminals"
+    );
+    // Past the grace window the per-template cap applies.
+    q.trim_ignoring_grace();
     assert_eq!(q.snapshot().len(), 5, "per-template history cap");
     assert_eq!(q.live_count(), 0);
 }