docs: file unreleased entries under 0.6.0, drop CLI_NOISE_AUDIT.md, fix a doc comment

CHANGELOG.md

@@ -1,13 +1,9 @@
 # Changelog
 
-## [0.5.0]
+## [0.6.0]
 
 ### Added
 
-- `ncli decode` reads cash tokens (any HRP, e.g. `lokicash1...`) and
-  `circlehub1...` connections. Pairing secrets are never shown.
-  `cashhub1...` is recognized and rejected.
-- Every command's `--help` has an `Example:`.
 - `ncli profile <identifier>` prints a readable profile card for one
   identity -- metadata, following count, relay list, Blossom servers and
   lightning address -- from a single query, aggregated across every relay
@@ -25,6 +21,25 @@
   **stderr** -- help used to land on stdout -- and exit codes are
   unchanged, so a bare group command still exits 2, never 0. `--json` is
   untouched: one structured line, never help. (#55)
+
+### Fixed
+
+- An unknown flag was reported twice (cobra's own `Error:` plus ncli's
+  own line) and exited 1 instead of 2. (#55)
+- `ncli bunker sessions revoke-grant` with no `--method` exited 1 as
+  `internal` instead of 2 as `usage`. (#55)
+
+## [0.5.0]
+
+### Added
+
+- `ncli decode` reads cash tokens (any HRP, e.g. `lokicash1...`) and
+  `circlehub1...` connections. Pairing secrets are never shown.
+  `cashhub1...` is recognized and rejected.
+- Every command's `--help` has an `Example:`.
+
+### Changed
+
 - A local flow's `ensure` now defaults to `create` (was `exists`), so a
   missing store path is created instead of failing.
 - The Age column shows days and weeks (`2d4h`, `1w3d`) instead of
@@ -34,10 +49,6 @@
 
 ### Fixed
 
-- An unknown flag was reported twice (cobra's own `Error:` plus ncli's
-  own line) and exited 1 instead of 2. (#55)
-- `ncli bunker sessions revoke-grant` with no `--method` exited 1 as
-  `internal` instead of 2 as `usage`. (#55)
 - Wallet transfers reused a stale client on their second call.
 - NWC responses dropped the `circle_hub`/`circle_wallet` fee fields.
 - Two `Example:` commands failed when run as written.

cli/common/errors.go

@@ -50,14 +50,6 @@ var retryableCodes = map[ErrorCode]bool{
 	CodeNetwork:  true,
 }
 
-// CLIError wraps a command failure with an ErrorCode, and optionally the
-// single input value that caused it, so main.go's single top-level sink
-// (EmitError) can render it consistently -- a styled text line, or
-// structured JSON on stderr when --json is set -- and pick an exit code,
-// instead of every command choosing its own rendering and printing early.
-// Input is left blank when there's no one clean value to echo, or when the
-// value is sensitive (a private key, a vault password) and must not be
-// echoed back at all.
 // HelpMode says how much of a command's own help EmitError prints alongside
 // a failure. The zero value is HelpNone, so an error that was never
 // deliberately classified can't accidentally dump thirty lines of help.
@@ -76,6 +68,14 @@ const (
 	HelpAfterError
 )
 
+// CLIError wraps a command failure with an ErrorCode, and optionally the
+// single input value that caused it, so main.go's single top-level sink
+// (EmitError) can render it consistently -- a styled text line, or
+// structured JSON on stderr when --json is set -- and pick an exit code,
+// instead of every command choosing its own rendering and printing early.
+// Input is left blank when there's no one clean value to echo, or when the
+// value is sensitive (a private key, a vault password) and must not be
+// echoed back at all.
 type CLIError struct {
 	Err   error
 	Code  ErrorCode