[mforce]

Closes #291

Summary

• extract the inline Program.cs service-registration block into concern-focused AddCluckwork* extensions
• separate telemetry, persistence, identity, rate limiting, edge security, features, health checks, and durable jobs while preserving registrations and lifetimes
• keep eager startup validation and pass validated values back to Program.cs for TLS warning logging, OTLP status logging, and the Production proxy-trust guard
• reduce Program.cs from 914 lines to 388 lines
• refresh the graphify knowledge graph

Verification

• dotnet build Cluckwork.sln --no-restore
• dotnet test Cluckwork.sln --no-build --no-restore — 908/908 passed
• git diff --check

Independent review

• Claude CLI: identified concern-boundary cleanup for timezone validation, edge security, and durable jobs; addressed before final verification
• Pi v0.83.0 / DeepSeek V4 Flash DSpark: no findings after checking registration parity, lifetimes, startup guards, and concern boundaries