* fix(cli): validate process results before consuming JSON

Share bounded response decoding across usage, accounts, costs and sessions. Preserve verified CLI 0.76.0 structured exit-1 errors and healthy siblings; reject unexplained success payloads and process failures. Document isolated CLI evidence and update usage, translations and changelog. TODO parity entries are unchanged: this fixes the existing frontend boundary.

* test(cli): update roster lifecycle wiring assertion

* refactor(cli): clarify timeout status and sync catalog references

Address Opus standards review: use an absent process status for widget timeouts, reuse the captured exit code, and sync only affected generated catalog references. No translation or user-visible behavior changes; existing documentation, changelog and TODO remain accurate. Full make check passed with documented local optional-KDE skips.

* fix(cost): retain snapshots when CLI arguments are rejected

Address Grok specification review: global args errors are failed scans, not partial provider snapshots. Preserve prior data and snapshot context while keeping the older-CLI period diagnostic. Two production-controller regressions fail before and pass after; direct CLI/Cost response suites pass. Updated usage, development and changelog; no TODO parity item is completed.