Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

hermes_cli/kanban_ops.py

@@ -374,7 +374,9 @@ def _cmd_repair(args: argparse.Namespace) -> int:
     if report.backup_path:
         err(f"  corrupt copy quarantined at: {report.backup_path}")
     err(
-        "  Recover manually (e.g. `sqlite3 kanban.db \".recover\"` into a "
-        "fresh file) or move the file aside to start a new board."
+        "  Recover manually (copy kanban.db aside FIRST, then run "
+        "`sqlite3 <copy> \".recover\"` into a fresh file — never against "
+        "the live path, a WAL-reset-vulnerable sqlite3 CLI can corrupt it "
+        "further) or move the file aside to start a new board."
     )
     return 1