Reject unknown top-level qm.config.jsonc fields

[salluexez]

Summary

Validate top-level keys in qm.config.jsonc against VALID_TOP_LEVEL_KEYS during CLI configuration validation, failing early with a CliError when an unrecognized field (e.g. typos like "org_id") is present. Includes unit tests in cli/test/config.test.ts.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[Copilot]

Pull request overview

This PR tightens CLI configuration validation by rejecting any unrecognized top-level keys in qm.config.jsonc, helping catch typos (e.g. org_id) early with a clear CliError.

Changes:

• Add a VALID_TOP_LEVEL_KEYS allowlist and validate Object.keys(config) against it during loadConfigAt() validation.
• Emit a specific error message for unknown top-level fields (including the offending key).
• Add unit tests asserting unknown top-level keys are rejected.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
cli/src/config.ts	Adds an allowlist of permitted top-level config keys and fails validation on any unknown key.
cli/test/config.test.ts	Adds tests ensuring configs with unknown top-level fields throw with the expected error message.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[ReganBell]

Fixed on our side, going out shortly with you as co-author on the commit 🙏