feat: [V3 PM] Ship CLI/MCP PM harness parity and conformance benchmarks

[StatPan]

Closes #868

[StatPan]

Check

Self-review packet for ticket #868 and PR #883.

• PR readiness: ready_for_finish
• Finish ready: true
• Diff summary: 19 files changed, +958/-18
  • docs-site/command-capabilities.md: +2/-0
  • docs-site/command-reference.md: +64/-0
  • docs/cli-mcp-workflow-parity.md: +19/-0
  • docs/mcp-agent-workflow-best-practices.md: +6/-0
  • docs/mcp-read-only-surface.md: +20/-4
  • docs/pm-operating-policy.md: +24/-2
  • docs/v3-pm-harness-release-readiness.md: +72/-0
  • internal/cli/cli.go: +120/-1
  • internal/cli/pm_compile_cli_test.go: +16/-0
  • internal/cli/pm_harness_cli_test.go: +52/-0
  • internal/gira/command_registry.go: +14/-0
  • internal/gira/mcp.go: +18/-0
  • internal/gira/mcp_auth.go: +49/-11
  • internal/gira/mcp_auth_test.go: +3/-0
  • internal/gira/mcp_test.go: +24/-0
  • internal/gira/pm_compile.go: +3/-0
  • internal/gira/pm_compile_test.go: +13/-0
  • internal/gira/pm_harness.go: +364/-0
  • internal/gira/pm_harness_test.go: +75/-0
• Acceptance mapping candidates:
  • MCP remains an adapter and cannot invent lifecycle or PM semantics absent from the core. -> manual verification required
  • A caller cannot apply a stale or uncompiled PM plan through supported V3 paths. -> manual verification required
  • Bootstrap provides enough bounded context to resume without hidden thread memory. -> manual verification required
  • Conformance reports distinguish protocol compliance from semantic answer quality. -> manual verification required
  • Human CLI operation remains complete without MCP or an LLM. -> manual verification required
  • Two AI host/model runs complete the same fixtures with recorded failures and no unsafe mutation. -> manual verification required
  • Privacy rules prohibit secrets, private transcript capture, worker ranking, and token-spend productivity scoring. -> manual verification required
  • V3 release checklist includes compatibility, docs, dogfood, and rollback evidence. -> docs-site/command-capabilities.md, docs-site/command-reference.md, docs/cli-mcp-workflow-parity.md, docs/mcp-agent-workflow-best-practices.md, docs/mcp-read-only-surface.md, docs/pm-operating-policy.md, docs/v3-pm-harness-release-readiness.md
• Risk areas: Go runtime code changed, distribution or release path changed, documentation changed, security-sensitive files changed
• Full diff: gh pr diff 883 --repo StatPan/gira

Reviewer notes:

• Findings: none recorded by this self-review command.
• Test gaps: verify local and CI evidence before finish.
• Recommended action: continue normal review/check/finish flow.

Context:

• Ticket: [V3 PM] Ship CLI/MCP PM harness parity and conformance benchmarks #868
• Status: In review
• Linked PR: feat: [V3 PM] Ship CLI/MCP PM harness parity and conformance benchmarks #883
• Blockers: none
• Next: merge when policy checks pass