TOML script targets removed

Breaking change. Script targets no longer live in once.toml. once.toml is reserved for workspace configuration, and script actions now live under [[target]] with kind = "script" and a [target.script] block. Script file annotations also switched to the # Once marker. Existing [[task]] entries must be migrated to the new form before upgrading.