Document IPC transport, state-file permissions, and recent daemon hardening - Daemon now reaches its own hyperd over a local IPC channel (Unix domain socket / Windows named pipe) instead of TCP; health/control and discovery stay TCP. - ~/.hyperdb state files are owner-only (0700 dirs, 0600 files). - Daemon port 0 is rejected explicitly (was silently breaking discovery). - Crash-restart now publishes the new endpoint to daemon.json before the in-memory STATUS record, closing a stale-read race; noted the restart rate limit alongside it. - Noted the discovery file's additive identity block and its forward- compatible parsing.
docs(wiki): add Shared Daemon page (discovery, scanning, takeover, resident default)