fix(services): use Popen for daemon starts, remove fallbacks, dedup rsyslogd

Fix service startup in containers

fix(runtime): preserve per-host service specs and role-aware routing

Add episode CLI, synthetic data pipeline, NPC generalization, service manifest