Refine auxiliary local command surface coverage

[bingran-you]

Summary

• tighten the auxiliary local command surface leaf around one-shot local handoffs and support-only hidden locals
• make explicit that hidden stubs and support actions are not the same thing as public command promises

Validation

• npx -p first-tree first-tree verify