refactor(7 files): extensions + diagnostics + sops + packaging (ADR-025 L2)

Large batch of 7 files, 2 stars each -> selective.

extensions/versions.nu:
  utils/logging.nu [log-debug log-error]
  oci/client.nu    [4 symbols]

extensions/discovery.nu:
  utils/logging.nu [log-debug log-error log-info]
  oci/client.nu    [6 symbols]
  extensions/versions.nu [is-semver sort-by-semver get-latest-version]
    — kept, already selective; promoted to absolute path

extensions/registry.nu:
  extensions/loader.nu [discover-providers discover-taskservs]
  config/accessor      DROPPED (dead)

diagnostics/next_steps.nu:
  user/config.nu  [load-user-config]
  config/accessor DROPPED (dead)

diagnostics/health_check.nu:
  config/accessor/core.nu [config-get]
  user/config.nu          [get-user-config-path load-user-config]

sops/lib.nu:
  utils/interface.nu [_ansi _print]
  utils/init.nu      [3 symbols] (already selective; promoted to absolute)
  config/accessor    DROPPED (dead)

packaging.nu:
  config/accessor/core.nu [get-config]
  utils/ star-import      DROPPED (dead)

Validation: all 7 nu --ide-check 50 -> 0 errors.

Refs: ADR-025

nulib/lib_provisioning/diagnostics/health_check.nu

@@ -2,8 +2,9 @@
 # Deep health validation for provisioning platform configuration and state
 
 use std log
-use ../config/accessor.nu *
-use ../user/config.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/config/accessor/core.nu [config-get]
+use lib_provisioning/user/config.nu [get-user-config-path load-user-config]
 
 # Check health of configuration files
 def check-config-files [] {

nulib/lib_provisioning/diagnostics/next_steps.nu

@@ -2,8 +2,9 @@
 # Provides intelligent next-step suggestions based on current system state
 
 use std log
-use ../config/accessor.nu *
-use ../user/config.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/user/config.nu [load-user-config]
 
 # Determine current deployment phase
 def get-deployment-phase [] {

nulib/lib_provisioning/extensions/discovery.nu

@@ -5,9 +5,13 @@
 # Extension Discovery and Search
 # Discovers extensions across OCI registries, Gitea, and local sources
 
-use ../utils/logging.nu *
-use ../oci/client.nu *
-use versions.nu [is-semver, sort-by-semver, get-latest-version]
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/utils/logging.nu [log-debug log-error log-info]
+use lib_provisioning/oci/client.nu [
+    get-oci-config is-oci-available load-oci-token oci-get-artifact-manifest
+    oci-get-artifact-tags oci-list-artifacts
+]
+use lib_provisioning/extensions/versions.nu [is-semver sort-by-semver get-latest-version]
 
 # Discover extensions in OCI registry
 export def discover-oci-extensions [

nulib/lib_provisioning/extensions/registry.nu

@@ -1,8 +1,9 @@
 # Extension Registry
 # Manages registration and lookup of providers, taskservs, and hooks
 
-use ../config/accessor.nu *
-use loader.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/extensions/loader.nu [discover-providers discover-taskservs]
 
 # Get default extension registry
 export def get-default-registry [] {

nulib/lib_provisioning/extensions/versions.nu

@@ -1,8 +1,11 @@
 # Extension Version Resolution
 # Resolves versions from OCI tags, Gitea releases, and local sources
 
-use ../utils/logging.nu *
-use ../oci/client.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/utils/logging.nu [log-debug log-error]
+use lib_provisioning/oci/client.nu [
+    get-oci-config is-oci-available load-oci-token oci-get-artifact-tags
+]
 
 # Resolve version from version specification
 export def resolve-version [

nulib/lib_provisioning/packaging.nu

@@ -3,8 +3,9 @@
 # Author: JesusPerezLorenzo
 # Date: 2025-09-29
 
-use config/accessor.nu *
-use utils *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# utils/ star-import was dead — dropped.
+use lib_provisioning/config/accessor/core.nu [get-config]
 
 # Package core provisioning Nickel schemas
 export def "pack-core" [

nulib/lib_provisioning/sops/lib.nu

@@ -1,8 +1,9 @@
 
 use std
-use ../config/accessor.nu *
-use ../utils/interface.nu *
-use ../utils/init.nu [get-provisioning-use-sops, get-workspace-path, get-provisioning-infra-path]
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/utils/interface.nu [_ansi _print]
+use lib_provisioning/utils/init.nu [get-provisioning-use-sops get-workspace-path get-provisioning-infra-path]
 
 def find_file [
     start_path: string