fix(cnf): scoped subscribe matches peer-COMMAND envelopes (p=target), not just messages (p=to)

v1 debt 019f1184-e244: send-cmd stores the recipient under p=target (msg-cli.clj:128), but the daemon's sub-match? only matched p=to — so a --scoped subscriber never got pushed peer-commands targeted at it, silently breaking the decentralized command path under scoped subscribe. Now matches {to,target}. Verified: cmd-to-me passes, cmd-to-other doesn't; 16/16 snapshot tests green.

Author: tompassarelli

cnf_coord_daemon.clj

@@ -373,7 +373,10 @@
 ;; client re-scopes live on role/watch updates).
 (defn- sub-match? [flt {:keys [l p r]}]
   (or (nil? flt)
-      (and (= p "to") (contains? (:addrs flt) r))
+      ;; a MESSAGE (send -> p"to") OR a peer-COMMAND envelope (send-cmd -> p"target")
+      ;; addressed to one of my addrs. "target" lands last in the envelope, so matching
+      ;; it is the trigger; the reactor then reads the full @cmd:<id>. (v1 debt 019f1184-e244)
+      (and (#{"to" "target"} p) (contains? (:addrs flt) r))
       (contains? (:watch flt) l)
       (= l (:node flt))))