feat(cli): cover OpenAPI with a remote npm CLI and internal panel tools (#3074)

* feat(cli): add unified Commander CLI for QingLong 2.x

* fix(cli): publish via npm and address security review feedback

* ci(cli): package npm artifacts and remove evaluation collateral

* test(cli): use a fixed shell fixture for log retention

* refactor(cli): separate remote npm client from panel tools

* feat(cli): cover active panel OpenAPI resources

* docs(cli): unify authentication and skill guidance

* refactor(cli): isolate internal commands and generate Commander help

* refactor(cli): organize remote and internal modules by responsibility

* ci(cli): publish verified npm archives from master

* fix(cli): publish under the whyour npm scope

* ci: use npm trusted publishing for both packages

* docs: introduce the published CLI on the project homepage

* fix(cli): preserve server log truncation and correct login hints

* fix(cli): accept dashboard record request bodies

* fix(cli): preserve stdin for local task execution

* fix(cli): resolve task executables after changing directory

* fix(cli): preserve shell function tasks and sanitize test failures

* fix(cli): preserve shell hook state and resolve workdir after hooks

* fix(cli): preserve cleanup across shared shell task timeouts

* fix(cli): isolate shell control descriptors and reap timed-out descendants

cli/test/helpers/commands.cjs

@@ -0,0 +1,12 @@
+const parser = require('../../dist/shared/cli/arguments');
+const shared = require('../../dist/shared/cli/registry');
+const remote = require('../../dist/remote/commands/registry').registry;
+const local = require('../../dist/internal/commands/registry').registry;
+module.exports = {
+  ...shared,
+  ...parser,
+  commands: [...remote.commands, ...local.commands],
+  localOptions: local.options,
+  parse: (args, surface = 'public') =>
+    parser.parse(args, surface === 'local' ? local : remote),
+};