claude-his-agent v0.2.0: split — public framework only, private runbook fetched at install

The previous package bundled the agent prompt + skill cheatsheet, which leaked
home-infra topology (specific hosts/IPs, plug AINs, /opt/herding cred file
paths, kid/2FA context) to anyone with the public APT/pacman repo URL.

v0.2.0 ships only the plumbing:
- /usr/bin/claude-his-fetch     (rsync runbook from $HIS_CONTEXT_HOST over SSH)
- /usr/bin/claude-his-install   (symlinks cache -> ~/.claude/)
- /usr/share/doc/claude-his-agent/README.md

Runbook content lives at $HIS_CONTEXT_HOST:/opt/his-context/ (default hertz)
and gets fetched into ~/.cache/claude-his-agent/ on install. SSH key auth is
the trust boundary.

Adds rsync + openssh-client as runtime deps. Upstream sha256:
c39dd1a956d303ac2417498dde05ac923bf686f1fc978f78f0d63ca42432b8b8

debian/claude-his-agent/debian/control

@@ -7,12 +7,14 @@ Homepage: https://git.reauktion.de/marfrit/claude-his-agent
 
 Package: claude-his-agent
 Architecture: all
-Depends: bash
-Description: Home Infrastructure Specialist subagent + skill for Claude Code
- Ships the His subagent (agents/his.md) and skill (skills/his/SKILL.md) that
- encode operational knowledge of mfritsche's home network — distcc hosts,
- wake procedures, /opt/herding/ tooling, lmcp endpoints — so sibling Claude
- Code instances can summon it instead of re-learning the infra every session.
+Depends: bash, rsync, openssh-client
+Description: Claude Code framework for a private Home Infrastructure Specialist
+ Ships the plumbing for a personal "His" (Home Infrastructure Specialist)
+ subagent + skill: a fetcher (claude-his-fetch) that rsyncs the runbook from
+ a private host the user controls into a per-user cache, and an installer
+ (claude-his-install) that symlinks the cached files into ~/.claude/.
  .
- Files install to /usr/share/claude-agents/ and /usr/share/claude-skills/his/.
- Run 'claude-his-install' as a user to symlink them into ~/.claude/.
+ No infrastructure context is bundled in the package — the runbook prose lives
+ on $HIS_CONTEXT_HOST:/opt/his-context/ (default host: hertz) and is pulled
+ over SSH using the user's existing key auth. Refresh by re-running
+ claude-his-fetch.