prep docs and service updates

docs/modules/cli/prep/2025-11-20-ops-0001-prep.md

@@ -0,0 +1,20 @@
+# CLI Ops Prep — PREP-CLI-OPS-0001
+
+Status: **Ready for implementation** (2025-11-20)
+Owners: Ops Guild
+Scope: Capture required demo outputs and runbook deltas for the next CLI ops demo so CLI-OPS-0001 can proceed.
+
+## Required demo outputs
+- Latest CLI binary build identifier (commit SHA and version string).
+- Demo script transcript covering: `stella evidence verify`, `stella attest bundle verify`, `stella export ...` (airgap profile), and `stella policy lint`.
+- Screenshots or asciinema recording showing: auth flow with offline token, evidence verification success, attestation failure path.
+- Hashes for demo artefacts (bundles, logs) placed under `out/cli/demo-ops/` with `.sha256` files.
+
+## Runbook updates expected
+- Update `docs/modules/cli/operations/cli-ops-runbook.md` (section “Offline Demo”) with: prerequisites, commands, expected outputs, and rollback steps.
+- Add checklist to ensure `STELLA_CLI_OFFLINE=1` and local evidence bundle cache populated before demo.
+
+## Acceptance criteria
+- Demo outputs (recording + hashes) published under `out/cli/demo-ops/` with SHA256 files.
+- Runbook updated per above; references the exact CLI build SHA used.
+- Ops Guild signs off that CLI-OPS-0001 can move to implementation.