feat(cli): add publication moderation workflow

[Ghost-Frame]

Summary

• Add authenticated client calls for role-gated submission inspection, bounded artifact retrieval, moderation decisions, and promotion.
• Add frameshift moderation show, artifact, decide, and promote commands with stable retry identifiers and no-clobber artifact persistence.
• Document the account-backed publication and moderation workflow.

Verification

• cargo test -p frameshift-client -p frameshift-cli --locked
• cargo clippy -p frameshift-client -p frameshift-cli --all-targets --locked -- -D warnings
• cargo fmt --all -- --check
• git diff --check