feat(cli): nomarchy-pull / nomarchy-rebuild / nomarchy-home

Split lifecycle into three clear commands (user pick):
  nomarchy-pull     git pull (if checkout) + flake.lock update
  nomarchy-rebuild  system switch on current lock (snap + nvd)
  nomarchy-home     Home Manager switch

Full upgrade: pull && rebuild && home. Legacy sys-update / sys-rebuild /
home-update remain as wrappers. nixos-rebuild-snap uses NOMARCHY_PATH.

V0: flake check --no-build green.

docs/RECOVERY.md

@@ -27,11 +27,11 @@ recent desktop generations — pick one and it activates.
 Or simply apply a theme you know is good: `nomarchy-theme-sync apply
 boreal` (or any preset). If a switch failed halfway, the state file is written
 *before* the rebuild — fix the cause and re-run
-`home-manager switch --flake ~/.nomarchy` (or `home-update`).
+`home-manager switch --flake ~/.nomarchy` (or `nomarchy-home`).
 
 Your flake checkout is a git repo, and with auto-commit enabled every
 apply is a commit: `git -C ~/.nomarchy log` to see what changed,
-`git revert` the culprit, then `home-update`.
+`git revert` the culprit, then `nomarchy-home`.
 
 ## 2. The desktop won't start at all
 
@@ -59,7 +59,7 @@ last 10 generations are kept). That boots yesterday's system unchanged.
 Booting an old generation is temporary — the default entry is still the
 broken one. Make the fix stick from the working boot: revert the change
 in `~/.nomarchy` (`git -C ~/.nomarchy revert …` or edit `system.nix`
-back), then `sys-rebuild`.
+back), then `nomarchy-rebuild`.
 
 ## 4. Files went missing or wrong — snapshots (BTRFS installs)