feat(launcher-standard): require --version mode with machine-greppable format

[hyperpolymath]

Summary

The launcher-standard requires --help but not --version, so launchers
had no obligation to emit a version string. Result: field bug reports
consistently lack a build identity ("it's broken on my machine" with no
SHA, no way to bisect, no way to tell two builds apart).

This adds --version (and the alias -V) to the required meta-modes.
The first line of output MUST follow a machine-greppable format:

```
{app-name} {version} ({build-sha-short}) [{platform}]
```

Example: aerie-launcher 0.4.2 (a1b2c3d) [linux-x86_64]

Additional lines (build date, runtime versions, dep summary) MAY follow.
Exit code MUST be 0 on success.

Changes

• launcher/launcher-standard.a2ml: added --version to
  [required-modes].meta; added new [version-output] table specifying
  the first-line format, an example, exit code, and machine-greppable
  flag.
• docs/UX-standards/launcher-standard.adoc: added a row to the
  §Required Modes table describing --version / -V, the format, and
  the rationale.

Both files updated in the same commit per the §Sync requirement and the
lock-step CI gate (PR #172) — this PR is a good first live test of that
gate.

Test plan

• a2ml parses (python tomllib): meta = ['--help', '--version'],
  [version-output] round-trips with all four fields intact.
• AsciiDoc table renders (visual — added one row, no structural
  changes).
• Lock-step gate (ci: add launcher-standard prose↔a2ml lock-step gate #172) goes green on this PR's first push (both
  files in diff).

Coordination

• Independent of fix(launcher-standard): resolve 3 cross-doc contradictions #170, fix(launcher-standard): replace hard-coded /var/mnt/eclipse/... with a search-ladder #171, ci: add launcher-standard prose↔a2ml lock-step gate #172. The lock-step gate runs on every PR
  touching either of the two group files, so this PR will be one of
  the first live exercises of that gate once ci: add launcher-standard prose↔a2ml lock-step gate #172 lands.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 118 issues detected

Severity	Count
🔴 Critical	64
🟠 High	43
🟡 Medium	11

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/deno-ci-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "deno-ci-reusable.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance-reusable.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Python file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/a2ml-templates/state-scm-to-v2.py",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/a2ml/bindings/deno/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/lol/test/vitest.config.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/k9-svc/bindings/deno/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "Agda postulate assumes without proof -- potential soundness hole (4 occurrences, CWE-704)",
    "type": "agda_postulate",
    "file": "/home/runner/work/standards/standards/lol/proofs/theories/information_theory.agda",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/standards/standards/lol/src/abi/Locale.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "Wildcard CORS -- restrict to specific origins or use env var (1 occurrences, CWE-942)",
    "type": "js_wildcard_cors",
    "file": "/home/runner/work/standards/standards/consent-aware-http/examples/reference-implementations/deno/aibdp_middleware.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence