[scbrown]

Quipu request metrics currently group every CLI operation under seeds. Send seeds/<command> using the existing scoped canonical top-level command, so sd show reports seeds/show and comments subcommands share seeds/comments. Labels never contain arguments or subject identifiers. Library calls outside a CLI scope retain seeds.

Read, write and signed-request constructors use the same attribution helper. Existing source declarations, signatures and authentication behavior are preserved. This is a separate follow-up to #194; it does not include actor-policy changes.

Validation: request-constructor controls cover nested scopes, parallel threads, argument independence and comments subcommands; actual CLI read-attribution tests inspect wire headers. The recorded private HTTP fixture demonstrates five requests changing from seeds to seeds/show and an argument-independent control. See recording and reproduction. The fixture does not prove deployed behavior.

The pre-release-base full check passed with a clean HOME guard. Fresh current release-base full just check and repository-knowledge checks passed with HOME157 paths +5 UID resources clean; hosted CI and one independent review remain required. Release and the existing canary gates remain separate; this PR does not authorize installation, enrollment or alert retuning.

Bead: aegis-k67o

Overlap preflight: f6a8d53990639def6cc89f492fe8326a723b3f9bdb311ea6744c5ce90fceef9d

• perf(remote): prefer compatible board projection counts #187 @a8aae0e7: independent projection-count draft, server release/runtime gates retained.
• fix(auth): observe shared-key actor mismatches by default #194 @57399610: independent actor-compatibility proposal; no actor-policy changes absorbed.