Audit the palette and keymap

⌘K is the app's index, and a bindable command is a contract: its id is what a user writes in settings.yaml's keybindings: section, so it outlives every rename of the code behind it. The failure mode of both is silent. A feature ships, nobody registers a row or a command, and the palette quietly stops being complete.

The doctrine is in docs/architecture.md (the keymap section and "The command palette's rules sit beside the keymap doctrine") plus these ADRs. Read them before deviating, not before every audit:

• keybindings-are-chord-sequences-not-a-leader-key
• palette-scopes-are-filters-over-one-list
• palette-rows-name-objects-and-rendering-draws-the-path
• a-command-is-a-source

1. Scope the change