fix(housekeeping): harden command dispatch boundaries

src/features/housekeeping/foundation/commands/bootstrap.test.ts

@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { z } from "zod";
+import { anyCapability, ok } from "../contracts";
+import { housekeepingCommandRegistryReady } from "./bootstrap";
+import { registerHousekeepingCommand } from "./registry";
+
+describe("housekeeping command bootstrap", () => {
+	it("registers the complete current list and seals during module initialization", () => {
+		expect(housekeepingCommandRegistryReady).toBe(true);
+		expect(() =>
+			registerHousekeepingCommand({
+				id: "system.bootstrap.too-late",
+				owner: "system",
+				risk: "safe",
+				capability: anyCapability("admin.settings.view"),
+				input: z.object({}),
+				requiresReason: false,
+				rateLimit: { attempts: 1, windowMs: 1_000 },
+				execute: async (context) => ok(null, context.correlationId),
+			}),
+		).toThrow("command registry is sealed");
+	});
+});