GC Operations

GC defaults to plan/read-only. Real deletion needs explicit --confirm and the configured allowlist/retention policy.

Do not run broad prune/reset commands. Keep evidence of reclaimed space and protected paths.