carlos sidecars ls: show a worker held by the flat-exec policy Feature Request open
#370 (spec D14) wanted a state word in carlos sidecars ls for a worker the box refuses to run unisolated. The console's sidecars door carries no per-host state, so release N shows it only in carlos status --layout (operator view). A member-facing state needs the box's refusal record to reach the console's sidecar listing.