Add workstation doctor/fix audit wrappers for SourceOS workstation-v0

[mdheller]

SociOS-Linux/source-os now exposes a meaningful workstation control surface:

• sourceos doctor
• sourceos fix all|shell|fish
• JSON and report artifact modes for fix surfaces
• doctor.sh --json

prophet-cli should wrap the workstation audit/remediation path so it can become a first-class remote/operator surface rather than remaining local-only.

Scope

• Add commands or plugin hooks for:
  • workstation doctor audit
  • workstation fix audit (dry-run)
  • workstation fix apply / revert
  • report artifact retrieval / display
• Prefer report/evidence output rather than plain logs.
• Keep the CLI typed and policy-aware.

Desired outcomes

• Operators can trigger and inspect workstation flows from prophet-cli.
• CLI output aligns with the same JSON contracts used locally.
• Future transport to agentplane / sociosphere uses the same typed surfaces.

Cross-repo links

• Local implementation: SociOS-Linux/source-os
• Canonical schema target: SourceOS-Linux/sourceos-spec
• Runtime/evidence ingestion: SocioProphet/agentplane
• Workspace/operator UI: SocioProphet/sociosphere
• Typed contract generation: SocioProphet/contractforge

This issue is part of the workstation-v0 program tracked in SociOS-Linux/source-os.