Make Hub an explicit daemon-owned relationship with local-only management and scoped access to Hub-owned executions.