feat(cli): add D601 artifact registry planning

Add a first-stage artifact-registry CLI for D601 host-managed CNCF Distribution planning, rendering, dry-run install, and readonly status checks. Document the loopback-only boundary and future backend-core artifact CD flow.\n\nCloses #1.

scripts/cli.ts

@@ -17,6 +17,7 @@ import { parseNetworkPerfOptions, runNetworkPerf } from "./src/network-perf";
 import { ciHelp, runCiCommand } from "./src/ci";
 import { runSwapCommand } from "./src/swap";
 import { runDevEnvCommand } from "./src/dev-env";
+import { runArtifactRegistryCommand } from "./src/artifact-registry";
 import { isHelpToken, rootHelp, serverHelp, sshHelp, staticNamespaceHelp } from "./src/help";
 
 const remoteOptions = extractRemoteCliOptions(process.argv.slice(2));
@@ -134,6 +135,14 @@ async function main(): Promise<void> {
     return;
   }
 
+  if (top === "artifact-registry") {
+    const result = runArtifactRegistryCommand(args.slice(1));
+    const ok = (result as { ok?: unknown }).ok !== false;
+    emitJson(commandName, result, ok);
+    if (!ok) process.exitCode = 1;
+    return;
+  }
+
   const config = readConfig();
 
   if (top === "ssh") {