feat: add cli client foundation

[alexk-dev]

Summary

• add a dedicated CLI adapter module with the first Picocli command surface and global option binding
• add stable first-slice CLI contracts for events, runs, permissions, patches, sessions, trust, and tool records
• wire launcher and runtime application dispatch so golemcore-bot cli ... is a first-class entrypoint next to web
• update architecture docs and module dependency tests for the CLI boundary
• add the living TDD implementation checklist for the full CLI client scope

Tests

• ./mvnw -pl golemcore-bot-contracts -Dtest=CliContractsTest -DskipGitHooks=true -Dsurefire.failIfNoSpecifiedTests=false test
• ./mvnw -pl golemcore-bot-cli -am -Dtest=CliRootCommandTest -DskipGitHooks=true -Dsurefire.failIfNoSpecifiedTests=false test
• ./mvnw -pl golemcore-bot-app -am -Dtest=BotApplicationCommandLineTest,RuntimeLauncherTest,MavenModuleDependencyArchitectureTest -DskipGitHooks=true -Dfrontend.skip=true -Dsurefire.failIfNoSpecifiedTests=false -Dmaven.gitcommitid.skip=true test
• ./mvnw -DskipGitHooks=true -Dfrontend.skip=true -Dmaven.gitcommitid.skip=true clean verify

[sonarqubecloud]

Quality Gate passed

Issues
33 New issues
0 Accepted issues

Measures
0 Security Hotspots
92.5% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud