Group the module crates under modules/

The service pseudo-clients and the ircd protocol link sat flat at the
repo root, mixed in with the daemon core and the SDK. Move them all
under modules/ so the tree separates concerns cleanly: the daemon in
src/, the SDK every module links against in api/, and the loadable
modules — the pseudo-clients plus the protocol link — in modules/.

Workspace members, the daemon's per-crate dependency paths, and each
module's api path are updated to match; the docs follow. No code change.

modules/chanserv/src/mode.rs

@@ -0,0 +1,28 @@
+use fedserv_api::Store;
+use fedserv_api::{Sender, ServiceCtx};
+
+// MODE <#channel> <modes>: the founder sets channel modes via ChanServ.
+pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, db: &mut dyn Store) {
+    let Some(&chan) = args.get(1) else {
+        ctx.notice(me, from.uid, "Syntax: MODE <#channel> <modes>, e.g. MODE #chan +nt");
+        return;
+    };
+    if args.len() <= 2 {
+        ctx.notice(me, from.uid, "Syntax: MODE <#channel> <modes>, e.g. MODE #chan +nt");
+        return;
+    }
+    let founder = match db.channel(chan) {
+        Some(info) => info.founder.clone(),
+        None => {
+            ctx.notice(me, from.uid, format!("\x02{chan}\x02 isn't registered."));
+            return;
+        }
+    };
+    if from.account != Some(founder.as_str()) {
+        ctx.notice(me, from.uid, format!("Only \x02{chan}\x02's founder can change its modes."));
+        return;
+    }
+    let modes = args[2..].join(" ");
+    ctx.channel_mode(me, chan, &modes);
+    ctx.notice(me, from.uid, format!("Set \x02{modes}\x02 on \x02{chan}\x02."));
+}