Add confirmation policy for high-risk xCloud writes

[wnstfy]

Priority: Medium

Problem: Agent-facing examples run sensitive POST, PUT, and DELETE operations without a hard confirmation policy.

Acceptance:

• Confirm before reboot/restart, cert delete/switch, SSH auth changes, sudo users, cron create/execute/delete, vulnerability ignore, and force:true.
• Provide an explicit non-interactive override for approved automation.
• Reads and low-risk writes remain unaffected.