ps, stop, attach

Container lifecycle for heretic agents — label-based discovery, session filtering, JSON output, sidecar and network teardown, name matching rules, and detach keystrokes