Validate c1i v0.8.0 release readiness

[leet-c1]

Summary

• identify c1i as the C1.ai CLI and API in root help
• cover the public root-help branding contract with a regression test
• derive MCP gateway hosts correctly when the tenant label is followed by a compound routing suffix
• upgrade release builds to Go 1.27.1 and refresh supported runtime dependencies
• update the lint gate to golangci-lint 2.13.2 for Go 1.27 compatibility
• audit all embedded agent content: the seven current task runbooks cover MCP registration/distribution/verification, manually managed apps, delegated provisioning, access requests, and task approval
• make runbooks discoverable: docs guide now prints a concise purpose for every guide, while docs agents maps common tasks to the appropriate workflow
• complete runtime shell suggestions for docs guide <name> using the same registered names and summaries shown in the guide index
• complete public PowerShell completion guidance and validate piped command examples against Cobra without confusing usage alternatives for pipelines
• require the toolset-wide rollout guide to wait for every requested user’s grant, preventing an incomplete rollout from being reported complete
• simplify volatile operational guidance and guard runbook summaries, references, and completions against drift

End-to-end validation

• built the release candidate with Go 1.27.1 and exercised 49 authenticated read-only, docs, raw-API, role-mining, MCP-classifier, and discovery commands against a dev tenant
• exercised controlled create/read/update/delete and dry-run operations for apps, entitlements, access profiles, policies, service principals, credentials, and request lifecycles; test objects were deleted
• completed the MCP gateway handshake and listed 1,151 callable tools using the default derived gateway URL
• rendered docs agents into an AGENTS.md file and invoked every embedded docs guide workflow from the built binary
• generated Bash, Zsh, Fish, and PowerShell scripts; Bash syntax-checks, the generated PowerShell script registers c1i, and the binary returns filtered, described guide candidates through Cobra’s completion protocol
• audited README, CHANGELOG, embedded agent guidance, repository metadata, and all six README external links; no early-access or beta wording remains
• completed a five-lane adversarial review (security, scale, performance, correctness, and documentation/style); one confirmed P2 guide defect was corrected and regression-tested

Local checks

• go build ./...
• go vet ./...
• go test -count=1 -shuffle=on ./...
• golangci-lint v2.13.2 run --timeout=3m ./...
• cross-platform govulncheck (linux, darwin, windows)
• gosec -quiet -nosec-require-rules -nosec-require-justification ./...
• gitleaks detect --source . --no-banner
• documentation command/flag/exit-code consistency checks against the Cobra tree