Runtime cache CLI for scripts

The new once cache command gives scripts direct access to the same content-addressed store used by the graph. You can hash files, store and fetch blobs by digest, probe whether an action is cached, store and retrieve action results by declared inputs, and inspect cache stats. This lets scripts skip work when inputs are unchanged or restore artifacts instead of regenerating them.