build(cli): add authoritative ae binary

[sandersonstabo]

Dependency

• Stacked directly on build(packaging): align cargo binary identities #334 (agent/portable-cargo-binary-identity-port-17d9694).

Scope

• Add authoritative Bazel //modules/cli:ae, CLI library, unit-test, Clippy, format, and package test targets.
• Add modules/cli to the Cargo workspace and repin Cargo/Crate-Universe locks.
• Move the CLI manifest export to its Bazel package and register CLI targets in root aggregates.
• Qualify the now-ambiguous direct getrandom and sha2 Bazel aliases.
• Provide an isolated Bazel-only LOCALAPPDATA for the existing Windows path test.
• Resolve one fresh pedantic Clippy finding by making the data-only telemetry command enum Copy.

Verification

• //modules/cli:ae and //modules/cli:cli_unit_test build with Bazel --jobs=1.
• CLI unit suite: 59/59 passing.
• Cargo binary identity proof passing.
• Fresh direct Clippy markers for ae, the CLI unit crate, and the identity proof.
• Root //:format_test passing.
• cargo metadata --locked --offline passing.
• Exact-head receipt: D:/artisan-editor-gate-logs/portable-cli-bazel-target-20260829-gate6/receipt.json.

Exclusions / next work

• Installer Bazel target, four-binary payload assembly, signing, activation, and clean-host lifecycle remain later packets.
• No GitHub PR is merged or auto-merged by this change.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Adds the CLI as an authoritative Bazel target so ae builds, runs its unit tests, and is covered by root quality gates; the CLI library is also added to the Cargo workspace with repinned Cargo and Crate-Universe locks.

Notes

• getrandom and sha2 Bazel deps are now version-qualified (@crates//:getrandom-0.4.3, @crates//:sha2-0.11.0) because the CLI pulls in different versions.
• The Windows path test gets an isolated Bazel-only LOCALAPPDATA.
• The telemetry command enum is now Copy to clear a new Clippy finding.
• The CLI manifest export moved from the root to //modules/cli.

^{Written for commit 2c4758d. Summary will update on new commits.}