feat(contract): role watch and capability cmd.exchange

[frahlg]

Step 2 of srcfl/ftw ADR 0009. protocol/registry.yaml is copied byte for byte from srcfl/ftw-webapp#84, which adds:

• Role watch: ftw.live.read, ftw.plan.read, ftw.events.read and ftw.dispatch.write. An owner phone adds the watch and is its parent.
• Capability cmd.exchange: the box can take a watch.

Contract.swift gains roleWatch with its scopes and label, cmd.exchange in capabilities, and capCmdExchange, so ContractTests still matches. Nothing reads them yet. Step 9 offers Add watch only when a box says cmd.exchange and the phone is an owner.

Paired pull requests. All three carry the same file, byte for byte.

• srcfl/ftw-webapp: srcfl/ftw-webapp#84, the source copy
• srcfl/ftw: srcfl/ftw#1623, which also generates the Go constants

This repository's CI does not compare its copy with the other two, so I compared them by hand (below).

Tests

cd appleApp/FTWKit && swift test        293 tests in 48 suites passed
cmp protocol/registry.yaml against the ftw-webapp and ftw branches      identical
cmp protocol/push-catalogue.yaml against both                           identical

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-14T08:17:59.469214Z	aecbaba	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.