feat(cli): seats, init, doc, browser install and stop

- `seats` reports every seat probed (Fable first, Haiku for a seat that
  needs it), the API seats beside the driver's ledger, the drivers on the
  board, or all of it as JSON. In the sandbox a last line names `stop`,
  since the pids above cannot be signalled from there.
- `init` sets a repository up: the config from the template, the artifact
  and worktree dirs ignored, the prepush skill with a marker that lets a
  later init refresh it. The old link into the review-gates submodule is
  replaced by a real directory, never written through. A foreign link, a
  subdirectory, the home directory and a dir outside git are refused before
  anything is written.
- `doc [--path] prepush|manifest|config` prints a shipped text, or where
  the host sees it (the deployment's `active` link in the Flatpak).
- `browser install` runs the installer of the Playwright the pinned MCP
  server depends on, and checks the Chromium revision landed.
- `stop <scratch>` and `stop --hash <hash8>` write the stop file a running
  driver checks every 2 s, for live drivers only; the board is read, never
  written.

The option parser takes positionals, in the usage line, the help and the
errors. The Commands test runs all of them through this binary, seats on a
claude stand-in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

interfaces/Crafter.Review-Seats.cppm

@@ -112,6 +112,8 @@ export namespace Crafter::Review::Seats {
     };
     Zone LocalZone();
     Zone ZoneNamed(std::string_view name);
+    // "02:40": the clock in the zone.
+    std::string Clock(double epoch, const Zone& zone);
     // "02:40 (in 1h 50m)"; more than a day out with its date: "Wed 16 Sept,
     // 11:00 (in 6d 10h)".
     std::string FormatWhen(double epoch, double now, const Zone& zone);