cli-helper-1.0.0-rc.4

ci(helper): fix gate smoke tests for stdin passphrase interface

The post-build gate test still passed --passphrase (the old argv interface),
which the stdin-passphrase helper now rejects as INVALID_ARGS instead of
FORBIDDEN_CALLER — failing the publish workflow (caught on rc.3). Drop the flag,
feed stdin from /dev/null for the negative gate, and add a positive test that
pipes a passphrase + valid handshake and expects NO_IDENTITY, guarding the new
stdin interface in CI.