Replace the broad extraction with a small prototype contract. Define seven
object-safe capability facets, a generic fn-pointer handler transport,
portable registration metadata, prototype boundary values, focused tests, and
a hermetic no-TUI boundary gate.
Do not touch TUI production code, command dispatch, localization ownership,
shared App actions/results, providers, or command files. Later FEATs will first
adopt the shapes inside TUI one bounded group per PR, then move already-
decoupled groups one PR at a time.
Validated with contract check/test/clippy, workspace check, formatting,
boundary tests/gate, provider drift, source budget, web facts, and diff check.
Signed-off-by: Paulo Aboim Pinto <paulo.aboim.pinto@gmail.com>
