CLI workflows

Use a CLI workflow when a task belongs in source control or CI: validating instrumentation, exporting a dataset, checking a release gate, or promoting a known prompt version.

Keep CI credentials in the secret store, print identifiers rather than payloads, and make destructive operations explicit. A repeatable command should report the project, environment, input revision, and resulting trace or evaluation identifiers.