## Problem - Users have no way to reclaim disk space from disabled extensions without manual `rm -rf` - Root-owned files from Docker containers make manual cleanup fail without `sudo` - `dream disable` gives no indication that data is preserved or how to clean it up ## Proposed Solution - Add `dream purge <service>` command with type-to-confirm safety gate - Handle root-owned Docker files via Alpine container fallback - Update `dream disable` to show preserved data size and hint about purge - Explicit data lifecycle: disable (preserves data) → purge (deletes data) ## Scope - `dream-cli` only — `cmd_purge()`, `cmd_disable()` message, dispatch, help