Module ops/reconcile

Reconciles a provisioned site with today's pack (which delivers only at provisioning). A verdict asks about the end state before and after the apply; config goes through Drupal (php()), never SQL, as cache_config keeps a copy. Applied steps drop the heap image.