chore: housekeeping easy wins (#2138, #2228, #2231, #2133)

[viniciusdacal]

Summary

Four easy-win issues resolved in a single PR:

• vertz meta-package does not include the CLI — bun run dev fails with 'vertz: command not found' #2138 — Add @vertz/cli to vertz meta-package dependencies so bunx vertz dev works when only vertz is installed
• docs: fix service() examples to use rules.* descriptors and highlight deny-by-default #2231 — Replace all () => true access rules with rules.public across docs (services, entities, overview, quickstart, LLM quick reference, index). Added deny-by-default warning callout in services.mdx
• Document the /api/ route prefix convention clearly in docs and LLM reference #2133 — Document the /api/ route prefix convention in overview, services, and LLM quick reference pages
• fix(server): warn when route is silently skipped due to missing access rule #2228 — Add console.warn when entity/service routes are silently skipped due to missing access rules (the docs: add Vertz manifesto #1 DX trap)

Public API Changes

• @vertz/server (entity + service route generators) — Now emit console.warn at startup when routes are skipped due to missing access rules. No behavioral change — routes are still skipped, but developers now see why.
• vertz meta-package — Now includes @vertz/cli as a dependency.

Test plan

• 2083 tests pass (full suite)
• 3 new tests for route-skip warnings (service: 1, entity CRUD: 1, entity custom action: 1)
• Typecheck clean
• Lint clean (0 errors)
• Pre-push quality gates: 92/92 tasks successful

Closes #2138, closes #2228, closes #2231, closes #2133.

🤖 Generated with Claude Code