Implement credential-safe programs smoke gate (#97)

docs/test-client.md

@@ -3,9 +3,10 @@
 The `test-client` binary is a native Rust multi-client shell. It does not load
 the former C# executable or start a CLR process. The command registry owns the
 implemented system, communication, inventory, appearance, asset, movement,
-object, parcel, estate, grid, agent, friends, groups, directory, and statistics
-commands. `pending_test_client_commands()` now reports only the two explicitly
-owned voice-native adapters (`ParcelVoiceInfo` and `VoiceAcountCommand`).
+object, parcel, estate, grid, agent, friends, groups, directory, statistics,
+and voice-capability commands. `pending_test_client_commands()` is empty, and
+the completeness audit compares the source, generated, implementation, and
+runtime registries.
 
 ## Social, directory, and statistics behavior
 
@@ -92,7 +93,7 @@ cargo test -p libremetaverse-programs --test test_client_services_cli
 
 The world gate drives every command owned by the movement/object/land/grid
 issue, checks the exact fake backend calls, round-trips a linkset through
-import, and validates generated assets. The services gate drives every one of
-the 28 remaining non-voice commands in a single offline session, verifies the
-destructive-operation guards, and proves the pending inventory contains only
-the two explicitly owned voice adapters.
+import, and validates generated assets. The services gate drives every
+remaining service and voice-capability command in a single offline session,
+verifies the destructive-operation guards, proves voice account values stay
+redacted, and proves the pending inventory is empty.