fix(cli): prevent unnecessary vault startup

[nkavian]

Summary

• avoid vault startup for command-group help, leaf help, schemas, and unknown subcommands
• make forced vault reset idempotent without requiring a running daemon
• restore verified native peer-module resolution for the built development CLI
• treat only non-empty direct API keys as vault bypasses

Verification

• pnpm typecheck
• pnpm lint
• pnpm test (1,491 passed, 2 skipped)
• pnpm typedoc
• manual pnpm cli aep regression check
• isolated cold-start vault reset --force regression check

[codecov]

Codecov Report

❌ Patch coverage is 87.50000% with 3 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...ges/core/src/secure-storage/vault-peer-verifier.ts	0.00%	3 Missing ⚠️

📢 Thoughts on this report? Let us know!