feat(cli): M-Tool 1-3 — CLI, templates, Gitea publishing pipeline

Phase B complete: Shade now has a full developer tooling story.

@shade/cli
- shade init with project scaffolding from templates
- shade fingerprint (own or peer)
- shade publish (re-upload bundle)
- shade rotate (--identity for full rotation, otherwise signed prekey)
- shade peer add/list/verify/remove
- shade dashboard (opens observer in browser)
- shade doctor (diagnose config, storage, prekey server reachability)
- Config from .shaderc.json or SHADE_* env vars

Templates (in packages/shade-cli/templates/)
- bun-server — Bun + Hono backend with /send + /receive endpoints
- chat-demo — Two-process Alice/Bob chat over HTTP

Publishing pipeline (Gitea npm registry)
- .gitea/workflows/test.yml — CI on push/PR with PostgreSQL service
- .gitea/workflows/publish.yml — publish on git tag v*
- scripts/publish-all.ts — local publish helper with DRY_RUN support
- scripts/bump-version.ts — lockstep version bump across all packages
- Root package.json scripts: version, publish:dry, publish:all

Also: /health endpoint now lives in createPrekeyRoutes so doctor can
probe it without needing the full standalone setup.

Dry-run verified: all 11 packages pack cleanly.
246 tests passing, 0 failures.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

bun.lock

@@ -13,6 +13,23 @@
         "bun-types": "^1.3.11",
       },
     },
+    "packages/shade-cli": {
+      "name": "@shade/cli",
+      "version": "0.1.0",
+      "bin": {
+        "shade": "src/cli.ts",
+      },
+      "dependencies": {
+        "@shade/core": "workspace:*",
+        "@shade/crypto-web": "workspace:*",
+        "@shade/sdk": "workspace:*",
+        "@shade/storage-sqlite": "workspace:*",
+        "@shade/transport": "workspace:*",
+      },
+      "devDependencies": {
+        "@shade/server": "workspace:*",
+      },
+    },
     "packages/shade-core": {
       "name": "@shade/core",
       "version": "0.1.0",
@@ -291,6 +308,8 @@
 
     "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.60.1", "", { "os": "win32", "cpu": "x64" }, "sha512-lWMnixq/QzxyhTV6NjQJ4SFo1J6PvOX8vUx5Wb4bBPsEb+8xZ89Bz6kOXpfXj9ak9AHTQVQzlgzBEc1SyM27xQ=="],
 
+    "@shade/cli": ["@shade/cli@workspace:packages/shade-cli"],
+
     "@shade/core": ["@shade/core@workspace:packages/shade-core"],
 
     "@shade/crypto-web": ["@shade/crypto-web@workspace:packages/shade-crypto-web"],