feat(vks): add --dry-run to remaining mutating commands

[vks-team]

Summary

After v1.4.0 covered destructive commands, five mutating (non-destructive) VKS commands still lacked --dry-run. This adds it to all of them, so every mutating VKS command now supports --dry-run.

Commands gaining --dry-run:

• config-auto-healing
• config-auto-upgrade
• update-nodegroup-metadata
• upgrade-nodegroup-version
• generate-kubeconfig

Behavior

For these config/update-style commands, --dry-run previews the request payload and exits before createClient — so it needs no credentials or network. A shared helper cli.PrintDryRun(verb, target, body) keeps the output consistent (sorted keys + the standard Run without --dry-run to <verb>. footer):

$ grn vks upgrade-nodegroup-version --cluster-id k8s-x --nodegroup-id ng-x --k8s-version v1.29 --dry-run
=== DRY RUN ===
Would upgrade node group ng-x:
  kubernetesVersion: v1.29

Run without --dry-run to upgrade.

These are not destructive, so there is no confirmation prompt — dry-run just previews (unlike the delete commands, which preview + confirm).

Note

delete-auto-upgrade-config was intentionally kept (it backs a real DELETE /auto-upgrade-config endpoint) and already had --dry-run from v1.4.0.

Testing

• go vet ./... clean; full go test ./... passes; build clean.
• Verified all 5 dry-runs print the preview and exit 0 offline (no credentials).
• Re-audited: no mutating VKS command is missing --dry-run.

🤖 Generated with Claude Code