feat(cli): M-Tool 1-3 — CLI, templates, Gitea publishing pipeline

Phase B complete: Shade now has a full developer tooling story.

@shade/cli
- shade init with project scaffolding from templates
- shade fingerprint (own or peer)
- shade publish (re-upload bundle)
- shade rotate (--identity for full rotation, otherwise signed prekey)
- shade peer add/list/verify/remove
- shade dashboard (opens observer in browser)
- shade doctor (diagnose config, storage, prekey server reachability)
- Config from .shaderc.json or SHADE_* env vars

Templates (in packages/shade-cli/templates/)
- bun-server — Bun + Hono backend with /send + /receive endpoints
- chat-demo — Two-process Alice/Bob chat over HTTP

Publishing pipeline (Gitea npm registry)
- .gitea/workflows/test.yml — CI on push/PR with PostgreSQL service
- .gitea/workflows/publish.yml — publish on git tag v*
- scripts/publish-all.ts — local publish helper with DRY_RUN support
- scripts/bump-version.ts — lockstep version bump across all packages
- Root package.json scripts: version, publish:dry, publish:all

Also: /health endpoint now lives in createPrekeyRoutes so doctor can
probe it without needing the full standalone setup.

Dry-run verified: all 11 packages pack cleanly.
246 tests passing, 0 failures.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/shade-cli/src/commands/dashboard.ts

@@ -0,0 +1,30 @@
+import { loadConfig } from '../config.js';
+
+/**
+ * Open the observer dashboard in the default browser.
+ *
+ * If SHADE_OBSERVER_URL is set, uses that. Otherwise derives it from
+ * SHADE_PREKEY_SERVER assuming the observer is mounted on the same host.
+ */
+export async function dashboardCommand(): Promise<void> {
+  const config = loadConfig();
+
+  const baseUrl = config.observerUrl ?? `${config.prekeyServer}/shade-observer`;
+  const dashboardUrl = `${baseUrl.replace(/\/$/, '')}/dashboard/`;
+
+  console.log(`Opening ${dashboardUrl}`);
+  if (config.observerToken) {
+    console.log(`Token is configured — paste it on the login screen.`);
+  } else {
+    console.log(`No SHADE_OBSERVER_TOKEN set — you'll be prompted to enter it in the browser.`);
+  }
+
+  // Open in default browser (cross-platform)
+  const platform = process.platform;
+  const opener = platform === 'darwin' ? 'open' : platform === 'win32' ? 'start' : 'xdg-open';
+  try {
+    Bun.spawn([opener, dashboardUrl], { stdout: 'ignore', stderr: 'ignore' });
+  } catch {
+    console.log(`Failed to auto-open. Copy the URL above into your browser.`);
+  }
+}