feat(js): full CLI parity with Python package

[AgentSeal]

Summary

• Brings JS npm package to full feature parity with Python pip package
• Adds 9 missing CLI commands: scan-mcp, shield, fix, watch, config, login, activate, profiles, registry
• Fixes VERSION constant (was hardcoded "0.1.0", now reads from package.json)
• Bumps JS package from 0.6.1 to 0.8.1 matching Python
• Adds --profile, --cursor, --claude-desktop, SARIF output to scan command
• Wires LLM judge into guard command (--model, --api-key, --llm-all)
• Loads saved config as defaults for scan/guard/watch commands
• Validates config keys against allowed list
• All new commands verified end-to-end

Changes

File	Action	What
js/bin/agentseal.ts	Modified	Wire all 12 commands, add imports, config defaults
js/src/config.ts	New	Config management (~/.agentseal/config.json)
js/src/login.ts	New	Dashboard credentials + Pro license storage
js/src/watch.ts	New	Canary probe selection + regression detection
js/src/scan-mcp-cli.ts	New	MCP scan result renderer
js/src/types.ts	Modified	Add probes to ValidatorOptions
js/src/validator.ts	Modified	Support custom probe filtering
js/src/index.ts	Modified	Export new modules
js/package.json	Modified	Bump to 0.8.1
js/test/config.test.ts	New	4 tests
js/test/login.test.ts	New	3 tests
js/test/watch.test.ts	New	3 tests
js/test/cli-commands.test.ts	New	13 tests (version + 12 command registration)

Test plan

• npx tsc --noEmit — 0 TypeScript errors
• npm test — 965/965 tests pass
• npm run build — clean build
• --version reports 0.8.1
• All 12 commands respond to --help
• agentseal guard --no-registry --no-diff runs end-to-end
• agentseal scan-mcp --verbose scans and reports findings
• agentseal profiles lists 8 profiles
• agentseal config set/show/remove cycle works
• agentseal config set garbage-key x rejected with exit 1
• agentseal fix --list-quarantine works
• No secrets, API keys, or Pro-only code in diff