v0.16.1

Fix: provider get/list read the correct scope and status paths

A display-path fix, found by exercising provider get against a real team-scoped provider.

• Scope showed the wrong value. provider get and provider list -o wide read spec.scope as a string, but the ProviderConfig stores scope as an object (spec.scope.type). The string read was always empty, so the platform fallback fired and a team-scoped provider displayed as platform. They now read spec.scope.type, so team-scoped providers show team and unscoped providers still show platform.
• Validation error never displayed. It was read from a status.validationError field that does not exist; a failed validation is recorded as the Ready condition's message, which is now where it is read from.
• Last-validation timestamp was read from status.lastValidatedAt; the field is status.lastValidationTime.

Verified live on butler-beta with a throwaway team-scoped provider before and after the fix.