refactor(cache/coredns/extensions/vm): selective imports — 6 files (ADR-025 L2)

Combined batch of 6 L2 refactors. Same mechanical pattern (star -> selective);
grouped in one commit because batch 1 was staged but not committed before
batch 2 was prepared.

=== extensions/commands.nu (4 stars -> 1 selective, 3 dead) ===
  loader_oci.nu [load-extension] (kept, already selective)
  discovery.nu  [4 symbols]
  cache.nu / versions.nu / utils/logging.nu  DROPPED (dead)

=== coredns/commands.nu (4 stars -> 3 selective, 2 dead + 1 broken) ===
  config/loader.nu [get-config] (already selective; promoted to absolute)
  service.nu  [8 symbols]
  zones.nu    [9 symbols]
  corefile.nu [2 symbols]
  utils/log.nu         REMOVED (file does not exist — dangling import)
  utils/logging.nu     DROPPED (dead)

=== cache/agent.nu (4 stars -> 2 selective, 2 dead) ===
  cache_manager.nu [4 symbols]
  batch_updater.nu [2 symbols]
  version_loader.nu / grace_checker.nu  DROPPED (dead)

=== vm/vm_persistence.nu (3 stars -> 2 selective, 1 dead) ===
  result.nu        [6 symbols]
  vm/lifecycle.nu  [vm-delete]
  vm/persistence.nu  DROPPED (dead)

=== vm/nested_provisioning.nu (3 stars -> 3 selective) ===
  vm/lifecycle.nu            [vm-info]
  vm/volume_management.nu    [volume-attach volume-detach]
  vm/network_management.nu   [network-connect network-disconnect]

=== vm/cleanup_scheduler.nu (3 stars -> 1 selective, 1 dead) ===
  vm/vm_persistence.nu [4 symbols]
  vm/lifecycle.nu      DROPPED (dead)
  Note: line ~211 embeds an intentional template string containing
  `use lib_provisioning/vm/cleanup_scheduler.nu *` — it's Nu script code
  written to disk at runtime for the scheduler daemon. NOT a real import.

Validation (ide-check 50 errors after vs baseline):
  extensions/commands.nu   0 vs 0    ✓
  coredns/commands.nu      50 vs 50  ✓ (pre-existing transitive noise)
  cache/agent.nu           0 vs 0    ✓
  vm/vm_persistence.nu     50 vs 50  ✓
  vm/nested_provisioning.nu 50 vs 50 ✓
  vm/cleanup_scheduler.nu  50 vs 50  ✓

21 star-imports eliminated (~10% of remaining 221).

Refs: ADR-025

nulib/lib_provisioning/cache/agent.nu

@@ -3,10 +3,12 @@
 # Token-optimized agent for progressive version caching with infra-aware hierarchy
 # Usage: nu agent.nu <command> [args]
 
-use cache_manager.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use version_loader.nu *
+# version_loader and grace_checker star-imports were dead — dropped.
-use grace_checker.nu *
+use lib_provisioning/cache/cache_manager.nu [
-use batch_updater.nu *
+    clear-cache-system get-cached-version init-cache-system show-cache-status
+]
+use lib_provisioning/cache/batch_updater.nu [batch-update-cache sync-cache-from-sources]
 
 # Main agent entry point
 def main [

nulib/lib_provisioning/coredns/commands.nu

@@ -1,11 +1,19 @@
 # CoreDNS CLI Commands
 # User-facing commands for DNS management
 
-use ../utils/log.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use ../config/loader.nu get-config
+# ../utils/log.nu was a broken import (file does not exist) — removed.
-use service.nu *
+# ../utils/logging.nu star-import was dead — dropped.
-use zones.nu *
+use lib_provisioning/config/loader.nu [get-config]
-use corefile.nu *
+use lib_provisioning/coredns/service.nu [
+    check-coredns-health get-coredns-status install-coredns reload-coredns
+    restart-coredns show-coredns-logs start-coredns stop-coredns
+]
+use lib_provisioning/coredns/zones.nu [
+    add-a-record add-aaaa-record add-cname-record add-mx-record add-txt-record
+    create-zone-file list-zone-records remove-record validate-zone-file
+]
+use lib_provisioning/coredns/corefile.nu [update-corefile validate-corefile]
 
 # DNS service status
 export def "dns status" [] {

nulib/lib_provisioning/extensions/commands.nu

@@ -1,10 +1,11 @@
 # Extension Management CLI Commands
 
-use loader_oci.nu load-extension
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use cache.nu *
+# cache.nu, versions.nu and utils/logging.nu star-imports were dead — dropped.
-use discovery.nu *
+use lib_provisioning/extensions/loader_oci.nu [load-extension]
-use versions.nu *
+use lib_provisioning/extensions/discovery.nu [
-use ../utils/logging.nu *
+    discover-all-extensions get-extension-versions list-extensions search-extensions
+]
 
 # Load extension from any source
 export def "ext load" [

nulib/lib_provisioning/vm/cleanup_scheduler.nu

@@ -3,8 +3,14 @@
 # Manages automatic cleanup of expired temporary VMs.
 # Rule 1: Single purpose, Rule 4: Pure functions, Rule 5: Atomic operations
 
-use ./vm_persistence.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use ./lifecycle.nu *
+# vm/lifecycle.nu star-import was dead — dropped.
+# Note: line ~211 embeds a string template with `use lib_provisioning/vm/cleanup_scheduler.nu *`
+# (scheduler script written to disk at runtime) — NOT an actual import.
+use lib_provisioning/vm/vm_persistence.nu [
+    cleanup-expired-vms find-expired-vms get-vm-persistence-info
+    get-vm-time-to-cleanup
+]
 
 export def "start-cleanup-scheduler" [
     --check-interval-minutes: int = 60

nulib/lib_provisioning/vm/nested_provisioning.nu

@@ -3,9 +3,10 @@
 # Support for nested VMs (VM → VM → Containers).
 # Rule 1: Single purpose, Rule 5: Atomic operations
 
-use ./lifecycle.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use ./volume_management.nu *
+use lib_provisioning/vm/lifecycle.nu [vm-info]
-use ./network_management.nu *
+use lib_provisioning/vm/volume_management.nu [volume-attach volume-detach]
+use lib_provisioning/vm/network_management.nu [network-connect network-disconnect]
 
 export def "nested-vm-create" [
     name: string                                 # VM name

nulib/lib_provisioning/vm/vm_persistence.nu

@@ -4,9 +4,10 @@
 # Rule 1: Single purpose, Rule 4: Pure functions, Rule 5: Atomic operations
 # Error handling: Result pattern (hybrid, do/complete for bash operations)
 
-use ../result.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
-use ./persistence.nu *
+# vm/persistence.nu star-import was dead — dropped.
-use ./lifecycle.nu *
+use lib_provisioning/result.nu [err is-err json-read json-write map match-result]
+use lib_provisioning/vm/lifecycle.nu [vm-delete]
 
 export def "register-permanent-vm" [
     vm_config: record             # VM configuration