fix: validate CLI options and output formats

[rogerchappel]

Summary

• reject options that are not supported by the selected command
• validate required option values and restrict output formats to markdown or json
• reject inline and separate values supplied to boolean flags
• document the complete accepted option set

Verification

• Tests or checks run:
  • npm test
  • bash scripts/validate.sh
  • git diff --check
  • end-to-end invalid format, misspelled option, and boolean-value CLI probes (all exit 1 with actionable stderr)
  • valid init, scan, report, and doctor CLI probes (all exit 0)
• Manual review completed:
  • confirmed open PRs ci: bump actions/checkout from 5 to 7 #12 and ci: bump actions/setup-node from 5 to 7 #15 only modify GitHub Actions
  • confirmed all proposed commits use Roger Chappel <miscanalysis@gmail.com> as author and committer

Risk Level

• Low
• Medium
• High

Notes:

This intentionally tightens invalid CLI input handling. Documented invocations remain accepted.

Rollback Plan

• Revert the three commits in this PR.

Human Decision Needed

• None
• Maintainer review
• Product/design decision
• Security/privacy review
• Other:

Commits

• test: cover invalid CLI options
• fix: validate command line options
• docs: document accepted CLI options