feat(cli): add ocu js and ocu repl

[iFurySt]

Summary

• add one-shot ocu js with positional, stdin, file, timeout, and JSON modes
• add persistent terminal ocu repl with bindings, multiline editor, reset, and lifecycle cleanup
• add stable help discovery plus human/JSON ocu capabilities diagnostics
• preserve ocu mcp as the native 9-tool compatibility surface

Runtime model

The npm CLI itself requires Node.js 18+. Once started, it reuses the current Node runtime. ocu js closes its Worker/native MCP child after one evaluation; ocu repl keeps them for the terminal session. On macOS, the separate hidden app agent may remain resident to preserve the permission identity.

Validation

• Node contract/integration tests: 18/18
• Swift tests: 167 passed, 1 opt-in live test skipped
• Linux and Windows Go tests; Linux Python tests
• 9-tool/cursor smoke suite
• full release build for macOS universal, Linux arm64/amd64, Windows arm64/amd64
• isolated tgz install on local macOS and Linux x64 devbox
• positional/stdin/JSON js, persistent and multiline repl, reset, SIGTERM cleanup, real native bridge, and exact 9-tool MCP surface
• docs, shell/Node syntax, action pinning, DSH installer, and diff checks

Notes

• PR js repl: surface thrown errors, skip action read-back on macOS #79 remains independent and is not included here.
• Full scripts/ci.sh still stops at the pre-existing repository-hygiene gate because the current main branch lacks the files that gate expects; every later CI substep was run separately and passed.