hostwarden-new-guestlisted

# hostwarden-new-guest Creates a guest and hands it over as a server in memory that meets `rules/baseline.md`. Nothing here is destructive: the guard stays on, and a step it asks about is asked of the user. ## Before anything else 1. **Overrides:** keys `hostwarden-new-guest` and `baseline`, per `rules/overrides.md`. 2. **The host's pipeline** (`rules/first-connection.md`). The host must be in memory with a `Hypervisor:` line, and not on the read-only list (`rules/access-control.md`). Register the session on it (`rules/parallel-sessions.md`): creating a guest is the first change. 3. **Which reference:** by the `Hypervisor:` line. - `Proxmox VE (qm, pct)` → `references/proxmox.md` - `libvirt` → `references/libvirt.md` - `Incus`, `LXD` → `references/incus.md` - `LXC` → `references/lxc.md` - Anything marked `read-only`, or an appliance whose file says its web UI owns the guests (Unraid, ZimaOS, TrueNAS, XCP-ng through Xen Orchestra): the user creates it; see Hosts that keep guests to their UI below. - Anything else: say that Hostwarden has no creation path for it and stop. ## The request First, one call on the host for what the defaults and the capacity check need: the reference's Before the creation. The guests' memory comes from the inventory the pipeline already ran (`rules/hypervisors.md` → Inventory). Then settle every parameter before the first change, in one question with defaults filled in (`AskUserQuestion` wher