ci / rust (push) Failing after 6s
Registry-side primitives for the daemon↔registry conversation. No client-facing HTTP yet (that's NAP-215). - `state::Registry`: in-memory store of connected daemons + a session catalog keyed by (daemon_id, session_id). Tracks pending CreateSession / KillSession RPCs so a single daemon connection can multiplex them. - `handler::handle_socket`: per-connection loop that authenticates the Hello, applies snapshot/diff/heartbeat frames, and resolves matching *Result frames. Heartbeat watchdog is a `tokio::time::timeout` around the read side — no separate janitor task. - `server::router_with_timeout`: axum router mounting `WS /daemon`. The timeout knob lets tests verify the 30s drop path in milliseconds. - `token::ensure_token`: first-run bootstrap that generates a 256-bit hex token, prints it once to stderr, and persists it to `~/.config/maestro/registry.toml`. - Outbound `create_session` / `kill_session` exposed as the internal API NAP-215's HTTP handlers will call. Integration tests use a real axum server bound to `:0` and drive it via `tokio-tungstenite`, covering: bad-token reject, snapshot accept, diff apply (add/update/remove), heartbeat timeout dropping the daemon, re-registration replacing the catalog, and a full CreateSession RPC round-trip. Closes NAP-213.