feat: complete CLI milestone

Finish the Milestone 4 CLI surface with config management, daemon
install and uninstall helpers, config reload handling, and final
polish for secret redaction and running-socket tracking.

PROJECT_MAP.md

@@ -19,7 +19,7 @@ script and control smart TVs through a stable, brand-agnostic API.
 
 ## Project Status
 
-**Phase:** Milestone 4 in progress. Daemon core is complete; CLI coverage is expanding beyond daemon/device/app-cache operations.
+**Phase:** Milestone 5 ready. Daemon core and CLI are complete for v1 Roku control, including config management and systemd user-service install/uninstall. Next work is HTTP API parity.
 **Platform v1:** Roku only (via ECP HTTP API)
 **Language:** Rust
 **Crate type:** Binary (single binary distribution target)
@@ -307,6 +307,8 @@ default = ""
 
 [dev]
 enabled = true
+roku_username = ""
+roku_password = ""
 ```
 
 ---
@@ -338,8 +340,6 @@ enabled = true
 ## What Has NOT Been Started
 
 - HTTP route handlers and request validation
-- CLI command handling for remote/state/dev/config flows
-- Daemon install/uninstall helpers and systemd unit generation
 - CI/CD configuration
 - Release/packaging