perf(cli): load only the registrar a one-shot command needs

Every rea process imported and registered all 52 command registrars
(about 1,900 modules) before running any command. A one-shot command
now loads only the registrar that defines its top-level command.

- src/cli/cliCommandRegistrations.ts holds every registrar in one table,
  grouped by tool family, with its module loader and its call. The
  complete createCli registers the table with static imports, and the
  types check that each entry matches its module.
- src/cli/cliShell.ts owns what does not depend on which commands are
  registered: identity, globals, argument policy, completions and the
  registration builtins. The full and lazy paths share it.
- scripts/record-cli-commands.mjs records, after tsc, which registrar
  defines each top-level command, from the same compiled table. The
  bundle keeps the record as an external dist module.
- cli/cliLoader.ts selects the recorded registrar when a known top-level
  command runs. It loads the complete CLI for help, --schema, --llms,
  completions, builtins, unknown names ("did you mean"), or a missing
  record.
- Process-owned CLI resources register their closers when their module
  loads (cli/cliResources.ts), so the shell no longer imports
  JavaScript-analysis and guidance owners just to close them.

Measured on one pinned core (median of 5 warm runs, base main vs this
change):
- guidance: 1.95 s / 253 MB → 0.42 s / 101 MB
- list-cutter-sessions: 1.97 s → 0.49 s
- inspect-go-binary: 1.95 s → 0.95 s
- setup --dry-run: 2.40 s → 1.88 s
- analyze: 2.39 s → 1.78 s
- --help: 1.99 s → 2.04 s (complete CLI, as before)

Co-Authored-By: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com>

scripts/bundle-runtime.mjs

@@ -11,9 +11,14 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 export const bundleRuntime = async (root) => {
   const compiledRoot = resolve(root, "dist");
   // CLI, MCP, workers and updater fixtures share one release-identity owner.
-  const metadataModule = join(compiledRoot, "generatedPackageMetadata.js");
+  // The recorded CLI command registrars stay one replaceable build fact too.
+  const recordedModules = new Set(
+    ["generatedPackageMetadata.js", "recordedCliCommandRegistrations.js"].map(
+      (name) => join(compiledRoot, name),
+    ),
+  );
   const isMetadataModule = (id) =>
-    isAbsolute(id) && resolve(id) === metadataModule;
+    isAbsolute(id) && recordedModules.has(resolve(id));
   const { rolldown, RUNTIME_MODULE_ID } = await import("rolldown");
   const { imports = {} } = JSON.parse(
     await readFile(join(root, "package.json"), "utf8"),
@@ -122,7 +127,7 @@ export const bundleRuntime = async (root) => {
                 return `${path.replace(/\.js$/u, "").split(sep).join("__")}-[hash].js`;
               },
         paths: (id) =>
-          isMetadataModule(id) ? "../generatedPackageMetadata.js" : id,
+          isMetadataModule(id) ? `../${relative(compiledRoot, id)}` : id,
         minifyInternalExports: directory === "mcp",
         codeSplitting: true,
         strictExecutionOrder: true,