Closes the pattern gap: cleanup, restore, and purge scripts now have a corresponding prompt.md for conversational invocation. Defaults to dry-run, requires confirmation before --execute, and surfaces the protected-paths list.
