fix(init): reject unknown patch actions in both dry-run and real patchset paths

Previously, applyPatchsetDryRun recorded every patch as applied regardless
of its action, while the real applyPatchset silently skipped unknown actions
via default: break. Both paths now return an explicit error on unrecognized
patch actions so behavior is consistent.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: betegon

src/lib/init/local-ops.ts

@@ -486,6 +486,12 @@ function applyPatchsetDryRun(payload: ApplyPatchsetPayload): LocalOpResult {
 
   for (const patch of params.patches) {
     safePath(cwd, patch.path);
+    if (!["create", "modify", "delete"].includes(patch.action)) {
+      return {
+        ok: false,
+        error: `Unknown patch action: "${patch.action}" for path "${patch.path}"`,
+      };
+    }
     applied.push({ path: patch.path, action: patch.action });
   }
 
@@ -540,7 +546,10 @@ function applyPatchset(
         break;
       }
       default:
-        break;
+        return {
+          ok: false,
+          error: `Unknown patch action: "${patch.action}" for path "${patch.path}"`,
+        };
     }
   }