feat(cli): support cf native commands

[realmroot]

Summary

• Recognize cf, npx cf, and pnpm cf when the Cloudflare Resource Server advertises them.
• Route these commands through the existing Cloudflare API v4 broker and remove inherited provider credentials.
• Keep Wrangler command support unchanged.

Verification

• go test ./...
• go vet ./...
• go build ./...

Acceptance

After the matching Adapter change is deployed, run realmroot exec cloudflare -- cf zones list with approved zone.read authority. The request should use the Agent's Resource Server credential, return a Cloudflare zone list, and leave Wrangler execution available.

The matching Adapter commit is deployed as Worker version 6b997f51-f532-4bd4-a1bd-57e5734aec59. The branch CLI executed the scoped cf zones list --per-page 1 call through Realmroot successfully (one result), and Wrangler whoami passed afterward.

---

_{🤖 Created by Jarvis via Realmroot}