feat(maestro): show only the program on session cards

The command fragment named the full command line, so a session spawned
with `claude --dangerously-skip-permissions` spent the whole line on a
flag. Cards now name the program only — its icon in the web client, its
bare name in the TUI — and keep the full command line in the tooltip.

Adds `maestro_protocol::display::command_program`, the Rust counterpart
of the web's `splitCommand`.

web/src/toolIcon.test.ts

@@ -20,12 +20,12 @@ describe("tool icons on the command fragment (docs/SIDEBAR.md)", () => {
     }
   });
 
-  it("keeps everything after the program as text", () => {
-    expect(splitCommand("claude --resume -p hi")).toEqual({
+  it("drops everything after the program", () => {
+    expect(splitCommand("claude --dangerously-skip-permissions")).toEqual({
       tool: "claude",
-      rest: "--resume -p hi",
+      program: "claude",
     });
-    expect(splitCommand("  zsh   -l  ")).toEqual({ tool: "shell", rest: "-l" });
+    expect(splitCommand("  zsh   -l  ")).toEqual({ tool: "shell", program: "zsh" });
   });
 
   it("looks through paths, env assignments and wrappers", () => {
@@ -33,13 +33,13 @@ describe("tool icons on the command fragment (docs/SIDEBAR.md)", () => {
     expect(splitCommand("FOO=1 BAR=2 claude").tool).toBe("claude");
     expect(splitCommand("npx opencode").tool).toBe("opencode");
     expect(splitCommand("pnpm dlx opencode run").tool).toBe("opencode");
-    expect(splitCommand("pnpm dlx opencode run").rest).toBe("run");
+    expect(splitCommand("pnpm dlx opencode run").program).toBe("opencode");
   });
 
-  it("leaves an unrecognised program as text, mark-less", () => {
+  it("leaves an unrecognised program as its bare name, mark-less", () => {
     expect(splitCommand("hx src/main.rs")).toEqual({
       tool: null,
-      rest: "hx src/main.rs",
+      program: "hx",
     });
     // A wrapper with nothing after it is not a tool either.
     expect(splitCommand("sudo").tool).toBeNull();