CI twin for PR #26 (r2)

[ualtinok]

Twin at e9cdca5 post-#23 rebase (mergeable verified).

---

^{Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.}

---

Summary by cubic

Introduce a control-plane route census to enumerate live consumers per module or daemon-wide. Previously there was no way to inspect route ownership; now supervisor.routes reports consumer identity, age, and draining state without contacting modules, making restarts safer.

• Add supervisor.routes to subc-control requests and responses. Responses include modules with routes, each route’s consumer (reserved { module_id } or direct { connection_id }), age_ms, and draining.
• Retain principal and bound_at on each route binding in subc-core forwarding; implement route_census and endpoint_routes that read under a single table lock.
• Extend the operator CLI with ck routes [<module-id>], with --json support.
• Update golden tests and thin-core op catalogs; add coverage for draining census and consumer classification.
• Version bumps: subc-control to 0.3.0, subc-core to 0.5.0.
• Migration: clients depending on subc-control must bump to 0.3 and update exhaustive ClientControlRequest/ClientControlResponse matches to handle SupervisorRoutes.

^{Written for commit e9cdca5. Summary will update on new commits.}