feat(cli): read organization Wiki and prepare v0.5.0

[KirbyInGitHub]

Changes

Adds read-only organization Wiki commands to the existing hiq-cortex client:

• knowledge search/read/links/sources --org <organization-id>, with published revision binding, pagination, source quotations and credential-free download URLs.
• doctor --org reports the actual current user and organization. Every knowledge request uses the selected organization and current user SSO; API keys cannot establish organization membership or silently select another stored account.
• Login requests cortex_data consent for LCA data and organization knowledge. The returned credential is the user’s full SSO login, as disclosed by the consent page; current access is checked server-side. An explicit absolute XDG_CONFIG_HOME selects the native store without falling back to a legacy identity.
• Knowledge and help commands avoid the dynamic MCP catalog. Retrieved material remains data and is never executed or downloaded automatically.

Prepares version 0.5.0 in package.json, lockfile and generated source, and updates package metadata/README. Existing REST, JSON output and exit-code conventions remain in use. No new SDK, credential service or generic proxy is introduced.

Validation

• macOS arm64 / Node 24.19.0: npm test, 18 passed, including actual CLI processes, loopback HTTP, fake OAuth and a clean npm package install.
• Packed 0.5.0 artifact: package/dist versions agree, knowledge.js is included, no credentials or env files; all four commands and doctor --org exercised from the clean installation. Nine help/version invocations passed.
• Covers exact org/revision transport, pagination, source evidence, empty results, invalid inputs, 400/401/403/404/422/503, unavailable/redirected/malformed responses, missing identity/API-key precedence, help without MCP, and isolated login/logout.
• actionlint 1.7.7 passes both workflows. CI’s runner.temp reference is on the test step, where that expression context is supported. Build/mirror shell syntax, POSIX installer syntax and git diff --check pass.
• PR CI 34610549178 passed on exact head d501d781880c78936f5207659977226ed3ed0b09: Ubuntu 24.04.5 and Windows Server 2025 (10.0.26100), both Node 22.23.2 / npm 10.9.8, 18/18 tests on each. These are npm/HTTP/package checks, not native binary or installer execution.
• Native binaries, release installers/CDN delivery, live organization calls, and use from Cortex Cowork/Codex/Claude Code remain separate acceptance gates. No production login or business request was used in local tests.

Consumers and release conditions

Uses the existing base and exact public routes /api/cortex/organization and /api/cortex/wiki/organization/*. The gateway routes, organization resolver and cortex_data consent must be deployed and verified with an authorized current user before release.

Keep this PR unmerged until the coordinating Cortex session finishes production query acceptance and reviews this exact head. Do not tag or publish npm/GitHub/CDN from this PR merely because CI passes. The existing v-tag workflow owns the five native artifacts, npm Trusted Publishing, GitHub Release, CDN mirror and installation checks. This change neither installs over a user’s existing CLI nor modifies any real credential.