fix(services): use Popen for daemon starts, remove fallbacks, dedup rsyslogd

fix(runtime): preserve per-host service specs and role-aware routing

Remove hardcoded fallbacks, add snapshot-driven service lifecycle