feat(cli): pick up the new v2 domains; discover modules instead of listing them

Merges `v2-api-spec` (#6150 — v2 endpoints for MCP servers, skills, custom
tools, folders, credentials) and the newer `improvement/v2-endpoints`.

`DOMAINS` and `SPEC_FILES` were hardcoded. Five new contract modules and a new
`openapi-v2-resources.json` had landed, and the generator would have skipped
every one — silently, with `--check` still passing, because the generated file
matched a generator that never looked. Both are now discovered from disk.

That is the same silent-drop class the review rounds kept surfacing, and it is
the property the whole pipeline rests on: a new v2 domain should reach the CLI
by regenerating, not by remembering to edit a list.

Result: 47 → 72 operations, 13 contract modules, and 25 new commands
(`sim skills list`, `sim mcp-servers get`, `sim folders delete`, …) with no CLI
change beyond the discovery fix. Summaries for the new domains now resolve too,
so their `--help` reads properly instead of falling back to `METHOD /path`.

Five new DELETEs arrived ungated. `deleteFolder` is the sharpest — the route
archives the folder *and cascades to its contents* — so its message says so
rather than reading like a single-item removal.

Added a test asserting every DELETE carries a confirmation, with
`undeployWorkflow` the one documented exception (reversible by redeploying). It
fails against this commit's own starting state, so the next domain to arrive
cannot land ungated the way these did.

`lib/skills/orchestration/skill-lifecycle.ts`, added by #6150, imports
`OrchestrationErrorCode` from `@/lib/workflows/orchestration/types`, which does
not exist — the type lives in `@/lib/core/orchestration/types`, where every
other consumer reads it. The branch does not type-check without this.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EsThUPqZXjwuuyRjBbmVkj

Author: 2 people

packages/sim-cli/src/contract/commands.ts

@@ -42,6 +42,20 @@ export const CLI_CONTRACT: CliContract = {
   deleteKnowledgeBase: { confirm: 'This deletes the knowledge base and every document in it.' },
   deleteKnowledgeDocument: { confirm: 'This deletes the document and its embeddings.' },
   deleteFile: { confirm: 'This archives the file.' },
+  deleteSkill: { confirm: 'This deletes the skill.' },
+  deleteCustomTool: { confirm: 'This deletes the custom tool.' },
+  deleteMcpServer: {
+    confirm: 'This removes the MCP server and the tools it provides.',
+  },
+  deleteCredential: {
+    confirm: 'This deletes the credential; anything authenticating with it stops working.',
+  },
+  deleteFolder: {
+    // The route archives the folder *and cascades to its contents*, so this is
+    // the broadest delete on the surface — the message says so rather than
+    // reading like a single-item removal.
+    confirm: 'This archives the folder and everything inside it.',
+  },
 
   // ─── Fields whose type misdescribes their meaning ─────────────────────────
   // `z.string()` that the route splits on commas. No generator can infer this.