Propose API-first ops console: status/inventory/runs REST, fail-closed operator token, Run now + pause controls, then thin UI. No cron edit or public Ingress in MVP.
