secure interactions and fix run require

packages/bare-os-coreutils/man/pages/discord-bot.json

@@ -5,7 +5,7 @@
   "synopsis": [
     "discord-bot [--env PATH] [--token TOKEN] [--guild ID] [--check] [--debug] [--message-content] [--login-timeout MS]"
   ],
-  "description": "Bare OS Discord bot via ctx.bare.discordJS. Commands run as the unlocked session user (not guest). /run is a non-interactive shell (cwd, history, autocomplete). /plugins loads JSON or JS from ~/.discord/plugins (see developer-guide ch.21). Also /settings, /files, /panel, /edit, /create, /bare, /sys, /svc, /fs, /net, /man, /say, /journal, /ping. Embeds paginate when large and expire after 2 minutes idle. Token from --token, DISCORD_TOKEN, or ~/.discord/.env. DISCORD_ID_WHITELIST restricts who may use the bot. The initd unit bare-os-discord is listed by systemctl only when ~/.discord/.env exists.",
+  "description": "Bare OS Discord bot via ctx.bare.discordJS. Commands run as the unlocked session user (not guest). /run requires cmd and is a non-interactive shell (cwd, history, autocomplete). /plugins loads JSON or JS from ~/.discord/plugins (see developer-guide ch.21). Also /settings, /files, /panel, /edit, /create, /bare, /sys, /svc, /fs, /net, /man, /say, /journal, /ping. Embeds paginate when large and expire after 2 minutes idle. Token from --token, DISCORD_TOKEN, or ~/.discord/.env. DISCORD_ID_WHITELIST restricts who may use slash commands and message components. The initd unit bare-os-discord is listed by systemctl only when ~/.discord/.env exists.",
   "options": [
     {
       "flag": "--env PATH",
@@ -42,7 +42,7 @@
     "DISCORD_ENV_FILE / BARE_OS_DISCORD_ENV_FILE — path to a .env file. On the host this may be a host filesystem path (booter reads it). In the guest it is a VFS path. Preferred guest path: ~/.discord/.env.",
     "BARE_OS_DISCORD_INITD — set 0 / false to never register the bare-os-discord systemctl unit, even when ~/.discord/.env exists.",
     "DISCORD_GUILD_ID — optional guild for slash-command registration.",
-    "DISCORD_ID_WHITELIST — comma-separated Discord user ids allowed to use the bot. Unset or empty allows everyone. A user not on a non-empty list is denied (ephemeral for slash commands).",
+    "DISCORD_ID_WHITELIST — comma-separated Discord user ids allowed to use the bot (slash, autocomplete, buttons, selects, modals, and channel ping). Unset or empty allows everyone to start commands; message components still belong to the operator who posted them. A user not on a non-empty list is denied (ephemeral reply).",
     "DISCORD_MESSAGE_CONTENT / BARE_OS_DISCORD_MESSAGE_CONTENT — set 1 to request Message Content Intent (same as --message-content).",
     "DISCORD_DEBUG / BARE_OS_DISCORD_DEBUG — set 1 to print discord.js debug lines.",
     "DISCORD_LOGIN_TIMEOUT_MS — login deadline in milliseconds (default 45000).",