Self-hosted remote command runner with an optional personal-assistant layer

Confirm window: 60s was too tight for phone-paced replies — 180s, configurable master

Real-world miss: the /restart confirm prompt was sent in 0.2s, but the reply arrived 70s after arming (delivery lag + human reaction) and hit the expiry. The window guards against confirming a forgotten command, not against slow thumbs — default it to 180s and make it OGMA_CONFIRM_TTL (floor 30s). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BpU5gQZgDocjfqqhNWJZvP