mod.rs keeps the container verbs + priv_run plumbing; git helpers, repo/dir setup, and host drop-in config move to their own files
mod.rs keeps dispatch + messaging/guards; schedules, reminders, config approvals, and lifecycle handlers move to their own files