Add CLI updater CI job

[sjmiller609]

Note

Medium Risk
Introduces automation that uses elevated GitHub App credentials and an AI-driven codegen step to push changes to another repo, so misconfiguration or prompt/agent behavior could create unintended CLI updates.

Overview
Adds a new GitHub Actions workflow (.github/workflows/update-cli-coverage.yml) that runs on main pushes (and via workflow_dispatch) to automatically keep kernel/hypeman-cli in sync with this SDK.

The job generates a GitHub App token, optionally resolves a target merged PR/merge SHA for manual runs, checks out the SDK at that ref, clones the API + CLI repos, and invokes cursor-agent with a prescriptive prompt to bump the CLI’s go.mod to the latest SDK tag/SHA, perform SDK-vs-CLI gap analysis, implement missing commands/flags, and push updates to an evergreen cli-coverage-update branch/PR.

^{Written by Cursor Bugbot for commit 9a1afd5. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}