P2 slice 8: the viewer's menu, setup, no confinement (D-32)

No Landlock, no seccomp, no helper: isolation is "same_user
(advisory)". The lease socket keeps two intents (close, format-upgrade
consent). The viewer holds the books open while it runs and gains a
Books menu: New books, Back up now, Restore (preview, then confirm),
Close, Connect Claude Code / Codex. New commands `wanderbooks books
back-up` and `wanderbooks connect claude|codex`. The scaffold
(`new`/`init` and its templates) is gone; install.sh needs no sudo.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj

crates/ledger-cli/Cargo.toml

@@ -4,7 +4,7 @@ version = "0.1.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "wanderbooks CLI: one command from nothing to a working books directory."
+description = "wanderbooks: the one executable (viewer, books server, host, agents' bridge, owner's commands)."
 
 [[bin]]
 name = "wanderbooks"
@@ -24,17 +24,14 @@ ledger-gui = { path = "../ledger-gui", optional = true }
 
 [dev-dependencies]
 base64 = "0.22"
-chrono = "0.4"
 libc = "0.2"
 reqwest = "0.13"
 rmcp = { version = "3", features = ["client", "transport-streamable-http-client-reqwest"] }
 tokio = { version = "1", features = ["macros", "rt-multi-thread", "time"] }
-ledger-config = { path = "../ledger-config" }
 ledger-core = { path = "../ledger-core" }
 ledger-vault = { path = "../ledger-vault" }
 serde_json = "1"
 sha2 = "0.10"
-toml = "1"
 tempfile = "3"
 
 [lints]