Refuse a plans line that acts wherever its subcommand stands

A flag before the subcommand (plans --json go <id>) still acts, so the
generic command verb judges every word of a plans line, retry included
(hq ADR 0266). The rest of this change, places and accesses at the
terminal and one line per setting, is issue 339's on main (#168, #170,
#172), which now does it for every process a verb runs; this branch's
--through-verb flag and its copy of those rules go.

cmd/mesh-controller/seatverbs.go

@@ -1367,7 +1367,10 @@ var commandReadForms = map[string]func(rest []string) bool{
 	// `plan <node>` previews a node's declaration; it sends nothing.
 	"plan": func([]string) bool { return true },
 	// `plans` lists and `plans <id>` shows one; `plans stop|close|go` acts.
-	"plans": func(r []string) bool { return !subIn(r, "stop", "close", "go") },
+	// Judged on every word, not the first: a flag before the subcommand (`plans --json go <id>`) still acts.
+	"plans": func(r []string) bool {
+		return !slices.ContainsFunc(r, func(w string) bool { return slices.Contains(plansActs, w) })
+	},
 	// `doctor` answers the last run, `probes` and `signals` describe; `doctor run` runs.
 	"doctor":     func(r []string) bool { return flagsOnly(r) || subIn(r, "probes", "signals") },
 	"conditions": func(r []string) bool { return flagsOnly(r) || subIn(r, "list", "show", "history") },
@@ -1388,6 +1391,9 @@ var commandReadForms = map[string]func(rest []string) bool{
 	},
 }
 
+// plansActs are the `plans` subcommands that act on a walk; no other word of a plans line is one of them.
+var plansActs = []string{"go", "stop", "close", "retry"}
+
 // heldAtTheTerminal is a refusal of policy (novox/hq ADR 0266): the verb is known and served, and this line is
 // the operator's at the controller's terminal. Never read as a verb this binary is behind on.
 type heldAtTheTerminal struct{ msg string }