feat: complete CLI milestone

Finish the Milestone 4 CLI surface with config management, daemon
install and uninstall helpers, config reload handling, and final
polish for secret redaction and running-socket tracking.

README.md

@@ -371,6 +371,8 @@ default = "living-room"
 
 [dev]
 enabled = true
+roku_username = ""
+roku_password = ""
 ```
 
 ### Config Keys
@@ -387,6 +389,8 @@ enabled = true
 | `discovery.timeout_secs` | `5` | Per-device timeout |
 | `devices.default` | `""` | Default device name or UUID |
 | `dev.enabled` | `true` | Enable dev tooling commands |
+| `dev.roku_username` | `""` | Optional Roku developer username override |
+| `dev.roku_password` | `""` | Optional Roku developer password override |
 
 ---