Command surface discovery with --list in JSON and toon formats

You can now discover the full CLI command surface by running --list. It works globally and from any subtree, and outputs in both JSON and toon formats so agents and scripts can introspect commands without reading help text.