Guide first capability-map inputs through command help

[iperev]

Summary

• Add complete audit_from_code and code_baseline examples to capability-map-admission --help, with an on-demand pointer from adoption guidance.
• Keep caller policy and evidence admission unchanged. Synthetic examples are not adopted requirements or executed proof.
• Exercise both examples through real CLI stdin and through the shared installed-package smoke. Reject wrong witness kinds, complementary-but-insufficient anchors, and counterfeit carrier behavior.
• Refresh derived command fingerprints and the ABI golden; prepare the compatible 0.14.2 release record and its independent release-note oracle.

Verification

• Full npm run check passed on committed head 643742248384e354b4689795318057ae0e4a2fda, including 315 browser tests, package artifacts, self-hosting and local release closeout.
• Targeted app, workflow-smoke and release-change tests passed. Five isolated Go overlays were rejected by the strengthened witnesses.
• Independent review of the final repair found no additional source defect in its assigned scope. Static review is not runtime evidence.
• A separate offline, network-disabled observation admitted three fixed inputs from actual help; the case without native witnesses retained zero binding seeds and explicit next actions. Extra host context prevents treating this as a clean-room usability benchmark.

Boundaries

No caller input schema or admission policy is weakened. No consumer repository, native consumer witness, registry, provider setting or installed skill is modified by this PR. Pilot notes and working plans remain outside the package source. Merge requires all applicable checks at the exact head; publication and phase completion are separate.