The prompt_runner control commands.
Written entirely against PromptRunner.Control. Nothing here reaches into
the runner, the plan, or the control directory directly. That is the point:
the CLI is one consumer of the control plane, not its owner, and if these
commands needed anything the module above does not expose then the boundary
would already have failed.