Transfer between provider folder and vault

One-shot import (provider folder → vault) or export (vault → provider folder). Upserts the link identified by (connection_id, direction, remote, vault_id): first call backfills, later calls move only new/changed files via the ledger. Poll GET /links/ → active_run for progress.