feat(cli): add reporting and billing reads

[aamir]

Summary

Understudy agents can now inspect customer-safe usage, workload routing health, per-call and workload customer cost, and organization billing history through authenticated, read-only CLI commands. This replaces the reporting skill's shell and curl workarounds while preserving repository-selected organization and project scope.

Design decisions

• Customer pricing, provider cost, and the authoritative billing ledger remain separate. Unpriced calls stay null, and billing request/event count differences are described neutrally because zero-cost traffic can legitimately have no priced event.
• Cost breakdowns expose pricing coverage and known gaps. Organization reporting explicitly notes that it has no coverage block.
• Response validation preserves additive customer-safe fields for --json, while strict provider-label and pricing-status contracts continue to fail closed at safety and decision boundaries.
• Human output escapes terminal control characters. Billing timestamps require an explicit timezone and are normalized to UTC before the request.
• The raw billing model-breakdown endpoint remains out of scope because its provider/model fields do not follow the customer-safe reporting contract.

Validation

• npm run check - build and type checks passed; 1,215 tests passed; all 43 public skills validated; package smoke passed.
• Focused hosted-fixture coverage exercises organization/project scope, usage and workload health, call and category costs, billing balance/summary/trend, additive fields, unpriced and zero-cost semantics, terminal escaping, UTC normalization, and the 5,000-group fail-closed boundary.

---

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 12f4c3cefb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.