launchd leaves goosed at a 256 soft nofile limit, causing EMFILE on busy
sessions. The run script now raises ulimit -n; the hardening script applies
this and the harness shim to the live pool with backup, rolling restart,
health checks and --rollback.
Co-authored-by: Cursor <cursoragent@cursor.com>