claude-code: remove from or restore to only an agent account's own home

Removing a rule from the operator's own home changes what their sessions
obey as surely as placing one: an agent could remove the rule that
constrains it (hq issue 340).

modules/claude-code/cmd/claude-code/home.go

@@ -199,6 +199,9 @@ type KeptFile struct {
 // a copy in the module's state first, under a dated folder, checks the copy, then deletes and logs. An item
 // the mesh placed is refused — unregistering owns it. Answers where the copy is, so it can be put back.
 func RemoveHome(p Paths, kind, name, why string, now time.Time) (map[string]any, error) {
+	if refused := HomeChangeRefused(p, "removing an item of the home"); refused != "" {
+		return nil, errors.New(refused)
+	}
 	why = strings.TrimSpace(why)
 	if why == "" {
 		return nil, errors.New("why is required: the person's reason for removing it, kept in the log")
@@ -348,6 +351,9 @@ func removalFolder(p Paths, kept string) (string, error) {
 // kept copy is exactly what was removed, file by file against the digests its note recorded. Logged as the
 // removal was; the copy stays, marked as put back.
 func RestoreHome(p Paths, kept string, now time.Time) (map[string]any, error) {
+	if refused := HomeChangeRefused(p, "putting an item back in the home"); refused != "" {
+		return nil, errors.New(refused)
+	}
 	folder, err := removalFolder(p, kept)
 	if err != nil {
 		return nil, err