Untangle the shared foundation that the cluster subsystem depends on, moving each
helper to the layer its dependency topology dictates, de-cli-ifying on the way
(cli-err → error make). One-directional imports only; verified no cycles.
comp-ncl-export → tools/nickel/process.nu
ws-resolution (8 fns + root finders) → domain/workspace/resolve.nu (new)
comp-ssh-run, comp-server-ssh-info → platform/clients/ssh.nu (new)
comp-kubectl-access, comp-kubectl-ssh → domain/cluster/access.nu (new)
Consumers (components.nu, components_cluster.nu, component.nu) repointed to the
new locations. components.nu 2664 → 2408.
Verified: NU_LIB_DIRS module-load of all 8 touched modules (no cycle, no missing
command, no export error); ADR-026 hygiene (no upward imports in the new
platform/domain/tools modules); `provisioning component list` runs; component/cluster
--help exit 0. Prereq for slice 2b (cluster helpers → domain/cluster/introspect.nu).
