Publish the host uninstall operator boundary

[adrianwebb]

Closes #90.

Outcome

Publishes CLI 0.13.0-rc.41 against SDK 0.13.0-rc.64 and exposes the canonical host uninstall contract without moving uninstall implementation into the CLI.

Boundary and safety

• Binds host uninstall to the protected local manager transport.
• Allows --plan without destructive authorization.
• Requires both --confirm and --yes before execute dispatch.
• Preserves explicit --purge-security intent without adding host-specific paths or state.
• Regenerates the catalog-derived reference, completion, and JSON schema.

Verification

• npm test: 74/74 pass.
• npm run release:verify: pass, including packed-install smoke.
• git diff --check: pass.

Exact custody

• Base: CLI staging 7c12c3320c44239f89105d53d75725186e08abec.
• SDK: 0.13.0-rc.64, staging dfc36193713d4c9ebeb68cd2d2bd23feca46f7e5.
• Intended release: 0.13.0-rc.41 after protected staging Actions pass.