Expose direct private CLI preparation in the missing-command state, then persist its selection and refresh usage. Preserve provider configuration and update preferences; cover preparation, retry, stale results, and complete popup setup with isolated fixtures.

Documentation: update installation, data freshness, managed CLI usage, smoke verification, translations, and Unreleased. TODO provider onboarding blockers remain because no authentication or CLI action contracts change.