fix(cli)!: retain repeated WASM input paths (#9624)

BREAKING CHANGE: caller_input_paths values may now be ordered arrays of strings as well as strings. Clients must accept both forms.

docs/getting-started/cli.md

@@ -633,7 +633,9 @@ including relative spelling and symlink aliases. Its subject identifies the
 inspected artifact; `caller_input_path` does not change the Evidence ID or
 snapshot query. A replay reports the current invocation's path while leaving
 the saved Evidence unchanged. Provider inspections continue to include the
-established `parameters.input_path` field.
+established `parameters.input_path` field. Named auxiliary inputs use
+`caller_input_paths`; each value is a string or an ordered array of strings
+for repeated selections. Consumers must accept both forms.
 
 Importing an Evidence bundle refreshes retained request and subject display metadata.
 It preserves cached analysis results, including observations for other targets.