Safety Guard for Destructive Kastell Operations

Summary

Intercepts destructive Kastell commands like destroy and restore to require explicit user confirmation via an LLM-based prompt hook. It provides a semantic layer of protection against accidental infrastructure changes.