DEHARD01: remove hardcoded user paths; PF-only profile default; doctor cmd-agnostic cl probe; tool scripts require explicit -Target
