5.5 Add CLI commands for managing trusted-session grants

[marwannettour]

Parent epic: #311

Summary

Add CLI management for trusted-client auto-accept grants.

Requirements

• Add commands to list grants.
• Add a command to show grants for a client.
• Add allow commands for auto-join, auto-inventory, and auto-synchronize.
• Add revoke support.
• Support --profile, --expires, and --json where useful.

Acceptance criteria

• CLI users can inspect, create, and revoke grants.
• JSON output is available for automation.
• Invalid grant requests fail with clear messages.