claude-code: write the home scope only into an agent account's own home

On the nodes where the agent runs as the operator, the home scope wrote the
operator's own ~/.claude, whose rules and skills load in every session, and
any node's tool could be addressed from another (hq issue 340). Take it
only for the serving node, where its home is an agent account's own; never
place a bus item in the operator's home. Ignore the built binary.

modules/claude-code/cmd/claude-code/config.go

@@ -963,11 +963,13 @@ func Register(p Paths, it Item, nodes []string, unregister bool, state ConfigSta
 		return map[string]any{verbOf(unregister): false, "reason": problem}, nil
 	}
 	if !unregister && it.Scope == ScopeHome {
+		// Every target judged before anything is put: a list is refused whole (novox/hq issue 340).
 		for _, n := range nodes {
-			if n == p.Node {
-				if conflict := HomeConflict(p, it); conflict != "" {
-					return map[string]any{"registered": false, "reason": conflict}, nil
-				}
+			if why := HomeScopeRefused(p, n); why != "" {
+				return nil, errors.New(why)
+			}
+			if conflict := HomeConflict(p, it); conflict != "" {
+				return map[string]any{"registered": false, "reason": conflict}, nil
 			}
 		}
 	}