claude-his-agent v0.2.0: split — public framework only, private runbook fetched at install

The previous package bundled the agent prompt + skill cheatsheet, which leaked
home-infra topology (specific hosts/IPs, plug AINs, /opt/herding cred file
paths, kid/2FA context) to anyone with the public APT/pacman repo URL.

v0.2.0 ships only the plumbing:
- /usr/bin/claude-his-fetch     (rsync runbook from $HIS_CONTEXT_HOST over SSH)
- /usr/bin/claude-his-install   (symlinks cache -> ~/.claude/)
- /usr/share/doc/claude-his-agent/README.md

Runbook content lives at $HIS_CONTEXT_HOST:/opt/his-context/ (default hertz)
and gets fetched into ~/.cache/claude-his-agent/ on install. SSH key auth is
the trust boundary.

Adds rsync + openssh-client as runtime deps. Upstream sha256:
c39dd1a956d303ac2417498dde05ac923bf686f1fc978f78f0d63ca42432b8b8

debian/claude-his-agent/debian/changelog

@@ -1,3 +1,20 @@
+claude-his-agent (0.2.0-1) bookworm trixie; urgency=medium
+
+  * Distribution-model split: package now ships only the framework
+    (claude-his-fetch + claude-his-install). The agent prompt and skill
+    cheatsheet — which previously embedded home-infra topology, plug AINs,
+    and cred file paths — have moved to a private host at
+    $HIS_CONTEXT_HOST:/opt/his-context/ (default host hertz) and are
+    pulled into ~/.cache/claude-his-agent/ over SSH at install time.
+    No infrastructure context is in the public package or its history.
+  * Adds rsync + openssh-client as runtime deps.
+  * Drops repo-inventory.sh and repo-inventory-nosudo.sh from /usr/bin
+    (now fetched into ~/.cache/claude-his-agent/scripts/ alongside the
+    runbook); existing prose updated to reference the cache path.
+  * Upstream history rewritten — pre-rewrite tree preserved out-of-band.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Sat, 02 May 2026 11:00:00 +0000
+
 claude-his-agent (0.1.9-1) bookworm trixie; urgency=medium
 
   * Runbook updates closing claude-his-agent #1 #2 #3: