CLI MVP: validate and inspect auth/card/deck manifests

[phenomenoner]

Why

The seed repo now has a clearer public contract, but the CLI still needs enough implementation to validate and inspect the core artifacts instead of only describing them.

Scope

• add manifest validation for auth profile, card, and deck files
• add inspect commands for card/deck/profile in human-readable and --json output
• validate key v0.1 fields such as:
  • card symbol_pool
  • capital_controls
  • stop / take-profit / forced-exit sections
  • feature_requirements
• keep the initial CLI bounded to authoring/inspection, not live control

Acceptance criteria

• a contributor can run validation against the example files in this repo
• schema/shape failures produce stable exit codes and readable errors
• inspect output is usable by both humans and automation
• no live broker action is required for this milestone