feat(hh): /pw command, RAM-only direnv autostart, robust lets-hack; coven→clergy

- add /pw (alias /password): reveal this room's password locally (never
  broadcast); surfaced in the F1 help overlay and the join hint
- direnv-autostart/: cd-to-launch a single real-user session via direnv;
  password is minted in memory at launch (never written to disk, matching the
  RAM-only model) and scoped to the child process. setup.sh installs direnv,
  hooks bash/zsh, and `direnv allow`s the dir
- lets-hack.sh: boot a FRESH server by default (replacing any live one) with a
  --reuse opt-out; add -h/--help/-help; guard against killing the tmux session
  you're attached to; switch-client into the coven when run inside tmux
- rename coven→clergy across rust/python/scripts; tests/test_coven.py→test_clergy.py
- snapshots in-progress hack-house client work (sandbox, themes, net, ui)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

hh/src/main.rs

@@ -84,11 +84,19 @@ fn main() -> Result<()> {
             theme,
         } => {
             let session = net::authenticate(&ip, port, &user, &password, no_tls, insecure)?;
+            let params = net::ConnParams {
+                ip,
+                port,
+                user,
+                password,
+                no_tls,
+                insecure,
+            };
             let theme = match theme {
                 Some(p) => theme::Theme::load(&p)?,
                 None => theme::Theme::default(),
             };
-            tokio::runtime::Runtime::new()?.block_on(app::run(session, theme))
+            tokio::runtime::Runtime::new()?.block_on(app::run(params, session, theme))
         }
         Cmd::Roomkey { password, room_salt_hex } => {
             let salt = hex::decode(room_salt_hex)?;