Git, redact, and cdp extensions went hexagonal
Spent the evening rebuilding the git, redact, and cdp extensions in pi-setup around ports and adapters: tool logic now lives in a pure domain layer with the Pi-specific glue behind small interfaces and fakes. Tests moved next to the source while I was at it, so each extension carries its own specs.