docs(cli): generated command reference with drift enforcement

docs/reference/cli.md renders from CLI_SPEC (bun run
docs:cli-reference); a test fails whenever the committed reference no
longer matches the spec, so flag/command docs cannot rot. Experimental
commands listed but not expanded.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: roodboi