Static per-action metadata that lives on the ActionSpec and must not be
re-declared anywhere else. Consumers (preview gate, RBAC) read it via
spec_meta.
The canonical catalogue of every action the daemon recognises, grouped by
domain. This is the single source of truth for per-action static
metadata (risk_level, reboot_required, rollback_available): the
preview/approval gate (preview.rs), the RBAC role table (policy.rs), and
docs/action-reference.md all derive from — or are consistency-tested
against — this list rather than re-declaring risk. The section titles are
the only hand-authored presentation input. See tests/action_consistency.rs
for the invariants that pin the derived tables to this catalogue.