refactor: kill→stop across API surface, CLI, TUI, and docs
Clean sweep — no kill on the Colibri wire protocol, CLI surface,
TUI keybinding, or documentation. Backward-compat aliases removed;
daemon and client deploy together so no transitional period needed.
Wire: KillAgent→StopAgent, "kill-agent"→"stop-agent" (no alias)
CLI: colibri kill→stop, Command::KillAgent→StopAgent
Lib: client.kill_agent()→stop_agent()
TUI: kill_selected()→stop_selected(), "kill"→"stop" label
Docs: spawn/kill→spawn/stop, kill-agent→stop-agent (40+ instances)
Retained kill only where it belongs:
- child.kill() / handle.kill() (OS SIGKILL)
- Unix kill(1) in sigterm tests
- OOM kill, process-group kill comments (kernel mechanism)