fix(cli): Resolve issues 530, 531, 532, 533

[archanavdev]

Fix CLI UX/DX, Security Hardening, and Telemetry

This PR groups several improvements to the sanctifier-cli component to harden the CLI, improve diagnostics, and stabilize behavior.

Changes Included

• Config Validation (Line/Column errors) (tooling/sanctifier-cli: Security hardening + threat model notes (config validation (line/column errors)) #531): .sanctify.toml parse errors no longer fall back silently. They now emit line and column details to stderr and safely exit with a non-zero status code across analyze, workspace, and storage commands.
• Benchmarks & Budgeting (tooling/sanctifier-cli: Improve UX/DX and defaults (benchmarks / startup performance) #533 & tooling/sanctifier-cli: Add performance benchmarks + budgets (telemetry (opt-in) CLI flags) #530): Added a --budget-ms flag to the benchmark command that causes the CLI to exit with an error if the 95th percentile duration of any rule exceeds the threshold. Also integrated the --telemetry flag to allow opting into telemetry submissions on demand.
• Integration Tests (tooling/sanctifier-cli: Release/publishing reliability improvements (CLI integration tests) #532): Added test cases targeting the invalid TOML config failures, benchmark budgets, and global CLI argument parsing.

Closes #530
Closes #531
Closes #532
Closes #533

[vercel]

@archanavdev is attempting to deploy a commit to the gbangbolaoluwagbemiga's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@archanavdev Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits