feat(cli)!: prepare universal offline v0.2.0rc1

[ryuhmanov-m]

Summary

• generalize Logs and Traces selector builders without project-specific field shortcuts
• add bounded NDJSON, JSON, CSV and text parsing with neutral/OpenTelemetry normalization
• add optional non-secret configuration and explicit offline capability reporting
• enforce reserved-scope rejection, field/input/output caps, exact stdout-envelope bounds and path-safe errors
• harden CI and tag releases with pinned actions/tooling, artifact validation, fresh-install smoke tests, checksums and provenance attestations
• document and enforce the fail-closed boundary for unsupported native Monium Alerts/Logs live reads

Compatibility

This pre-1.0 release candidate removes the schema-specific path/status helper
arguments. Callers should use the generic typed field filters documented in the
README. The existing logs url, logs parse and traces query workflows
remain offline; successful responses now identify mode: offline.

Safety boundary

alerts.list, alerts.read and logs.query.live remain unavailable with
reason_code=no_supported_provider. No live provider, private console gateway,
browser fallback, custom live endpoint, credential handling, background
telemetry, or Shotline-specific configuration is included. The parser accepts
only telemetry exports or stdin explicitly supplied by the user; it performs no
collection or transmission.

Validation

• 57 standard-library unit tests
• source/test compile check and git diff --check
• clean wheel and sdist build with pinned setuptools
• Twine metadata validation
• fresh wheel and sdist installation with PYTHONPATH unset
• artifact scan for private paths, credentials and removed provider modules
• independent release hygiene and security review