ota: typed `mnw-cli ota publish` + synckit-client ota module
CLI: add SSH auth rate limiting, sanitize API errors, log destructive actions
Restructure into monorepo