Group the module crates under modules/

The service pseudo-clients and the ircd protocol link sat flat at the
repo root, mixed in with the daemon core and the SDK. Move them all
under modules/ so the tree separates concerns cleanly: the daemon in
src/, the SDK every module links against in api/, and the loadable
modules — the pseudo-clients plus the protocol link — in modules/.

Workspace members, the daemon's per-crate dependency paths, and each
module's api path are updated to match; the docs follow. No code change.

modules/nickserv/src/alist.rs

@@ -0,0 +1,27 @@
+use fedserv_api::Store;
+use fedserv_api::{Sender, ServiceCtx};
+
+// ALIST: list the channels the sender's account founds or has access on.
+pub fn handle(me: &str, from: &Sender, ctx: &mut ServiceCtx, db: &dyn Store) {
+    let Some(account) = from.account else {
+        ctx.notice(me, from.uid, "You need to be logged in. Identify to NickServ first.");
+        return;
+    };
+    let mut rows: Vec<(String, &str)> = Vec::new();
+    for c in db.channels() {
+        if c.founder.eq_ignore_ascii_case(account) {
+            rows.push((c.name.clone(), "founder"));
+        } else if let Some(a) = c.access.iter().find(|a| a.account.eq_ignore_ascii_case(account)) {
+            rows.push((c.name.clone(), if a.level == "voice" { "voice" } else { "op" }));
+        }
+    }
+    if rows.is_empty() {
+        ctx.notice(me, from.uid, "You have access on no channels.");
+        return;
+    }
+    rows.sort_by(|a, b| a.0.cmp(&b.0));
+    ctx.notice(me, from.uid, format!("Channels you have access on ({}):", rows.len()));
+    for (chan, role) in rows {
+        ctx.notice(me, from.uid, format!("  \x02{chan}\x02 ({role})"));
+    }
+}