Introduce `logira watch` (service-watch mode)

[melonattacker]

Is your feature request related to a problem? Please describe.

Currently, users must wrap commands manually:

logira run -- claude

This becomes inconvenient when monitoring frequently-used tools such as:

• claude
• codex
• cursor

Users may forget to wrap commands, making monitoring inconsistent.

Describe the solution you'd like

Introduce a new command:

logira watch

Example usage:

logira watch --target claude

or

logira watch --config ~/.config/logira/config.yaml

Behavior:

• start a monitoring session
• detect matching processes
• track their activity
• group events into sessions or runs
• allow idle-based session closing

Conceptually:

run   = audit a single command
watch = continuously monitor selected binaries

Describe alternatives you've considered

Users can already run:

logira run -- <command>

However, this requires explicit wrapping every time and does not work well for:

• interactive agent workflows
• frequently invoked tools
• background processes

A watch mode would make monitoring easier and more consistent.

Additional context