📖About

Add an allowlisted restart_app operation to Radagast sudo executor that safely relaunches a critical non-systemd uvicorn app (initiatives/planner/gateway/auth) with its canonical config (cwd, workers, env) and writes an admin-log entry — the current service_action only handles systemd units, so the masked initiatives app had to be hand-restarted. Then extend the carol-admin-task skill to document restart_app.

✅Success criteria

• Radagast exposes an allowlisted restart_app op that relaunches a critical non-systemd uvicorn app (initiatives/planner/gateway/auth) with canonical workers+env, refuses systemd-managed/unknown apps, and writes an admin-log entry. (must_have)
• The carol-admin-task skill documents restart_app so the masked initiatives app no longer needs a hand-launch. (must_have)