Host scripts (scaffold)

Status: Documented entrypoints only — no executable bodies until build.

All scripts must wrap nemohermes / openshell / Docker. No parallel control API.

Intended entrypoints

Script	Role
`bootstrap.sh`	Host prereqs; install Docker if missing
`install.sh`	Stages S0b–S6
`upgrade.sh`	Snapshot, pull pins, migrate, re-apply policy, doctor
`doctor.sh`	Health checks
`connect/*.sh`	Operator connect helpers (Square, QBO, Vagaro, channels)
`install/`	Stage helpers
`lib/`	Shared shell helpers