Merge main (hq ADR 0266) into the mesh-cli answer, and close what the confirmation review found

- The generic command verb only reads now (commandReads) and terminal-only
  commands are refused through any verb (terminalOnly). mesh-cli's
  ordinary line made neither check: `node account`, `token issue` and
  `secret export` from another node would have run. It now meets both, in
  the one function the command verb shares.
- The serving controller marks itself and its children never the terminal
  (ADR 0266); a line mesh-cli runs as the terminal drops that mark and
  carries MESH_CLI_TERMINAL, so it reads as the terminal it is.
- Two withholding tests searched the answer's text while JSON writes bytes
  as base64, so they held nothing. They search both now, each proved by
  disabling what it guards (Shown, the bus withholding, `calls` via Get).
- The control-node refusal is tested through the assign and unassign acts.

cmd/mesh-controller/meshcli.go

@@ -183,9 +183,15 @@ const settingsForms = "settings set <module> <values> [--replace] [--node <node>
 // ADR 0272); any other line as the generic `command` verb takes it, with its refusals.
 func ordinaryLine(argv []string) ([]string, error) {
 	if len(argv) == 0 || argv[0] != "settings" {
+		// What the generic verb runs, and nothing it would refuse: its reading forms only, and never a command that
+		// is the terminal's alone (novox/hq ADR 0266) — the two checks argvFor makes of the `command` verb's line,
+		// made of the words as given rather than re-split from one string.
 		if err := refusedAsTheGenericCommand(argv); err != nil {
 			return nil, err
 		}
+		if err := terminalOnly(argv); err != nil {
+			return nil, err
+		}
 		return argv, nil
 	}
 	args := map[string]any{}