docs(m4.3): reconcile CLI README + Component-CLI to registered commands/options (document bundle group; fix option drift)

docs/requirements/Component-CLI.md

@@ -62,17 +62,17 @@ scadabridge template create --name <name> [--description <desc>] [--parent-id <i
 scadabridge template update --id <id> [--name <name>] [--description <desc>] [--parent-id <id>]
 scadabridge template validate --id <id>
 scadabridge template delete --id <id>
-scadabridge template attribute add --template-id <id> --name <name> --data-type <type> [--value <value>] [--description <desc>] [--data-source <ref>] [--locked <bool>]
-scadabridge template attribute update --id <id> [--name <name>] [--data-type <type>] [--value <value>] [--description <desc>] [--data-source <ref>] [--locked <bool>]
+scadabridge template attribute add --template-id <id> --name <name> --data-type <type> [--value <value>] [--description <desc>] [--data-source <ref>] [--locked]
+scadabridge template attribute update --id <id> [--name <name>] [--data-type <type>] [--value <value>] [--description <desc>] [--data-source <ref>] [--locked]
 scadabridge template attribute delete --id <id>
-scadabridge template alarm add --template-id <id> --name <name> --trigger-type <type> --priority <n> [--description <desc>] [--trigger-config <json>] [--locked <bool>]
-scadabridge template alarm update --id <id> [--name <name>] [--trigger-type <type>] [--priority <n>] [--description <desc>] [--trigger-config <json>] [--locked <bool>]
+scadabridge template alarm add --template-id <id> --name <name> --trigger-type <type> --priority <n> [--description <desc>] [--trigger-config <json>] [--locked]
+scadabridge template alarm update --id <id> --name <name> --trigger-type <type> --priority <n> [--description <desc>] [--trigger-config <json>] [--locked]
 scadabridge template alarm delete --id <id>
-scadabridge template script add --template-id <id> --name <name> --code <code> --trigger-type <type> [--trigger-config <json>] [--locked <bool>] [--parameters <json>] [--return-def <json>]
-scadabridge template script update --id <id> [--name <name>] [--code <code>] [--trigger-type <type>] [--trigger-config <json>] [--locked <bool>] [--parameters <json>] [--return-def <json>]
+scadabridge template script add --template-id <id> --name <name> --code <code> --trigger-type <type> [--trigger-config <json>] [--locked] [--parameters <json>] [--return-def <json>]
+scadabridge template script update --id <id> --name <name> --code <code> --trigger-type <type> [--trigger-config <json>] [--locked] [--parameters <json>] [--return-def <json>]
 scadabridge template script delete --id <id>
 scadabridge template composition add --template-id <id> --instance-name <name> --composed-template-id <id>
-scadabridge template composition delete --template-id <id> --instance-name <name>
+scadabridge template composition delete --id <id>
 scadabridge template native-alarm-source add --template-id <id> --name <name> --connection <name> --source-ref <ref> [--filter <expr>] [--description <desc>] [--locked]
 scadabridge template native-alarm-source list --template-id <id>
 scadabridge template native-alarm-source remove --id <id>
@@ -165,8 +165,8 @@ scadabridge deploy status [--instance-id <id>] [--status <status>] [--page <n>]
 ```
 scadabridge data-connection list [--site-id <id>]
 scadabridge data-connection get --id <id>
-scadabridge data-connection create --site-id <id> --name <name> --protocol <protocol> [--backup-config <json>] [--failover-retry-count <n>]
-scadabridge data-connection update --id <id> [--name <name>] [--protocol <protocol>] [--backup-config <json>] [--failover-retry-count <n>]
+scadabridge data-connection create --site-id <id> --name <name> --protocol <protocol> [--primary-config <json>] [--backup-config <json>] [--failover-retry-count <n>]
+scadabridge data-connection update --id <id> --name <name> --protocol <protocol> [--primary-config <json>] [--backup-config <json>] [--failover-retry-count <n>]
 scadabridge data-connection delete --id <id>
 ```
 
@@ -192,32 +192,36 @@ scadabridge notification create --name <name> --emails <comma-separated>
 scadabridge notification update --id <id> [--name <name>] [--emails <comma-separated>]
 scadabridge notification delete --id <id>
 scadabridge notification smtp list
-scadabridge notification smtp update --id <id> --server <host> --port <n> --auth-mode <mode> --from-address <email>
+scadabridge notification smtp update --id <id> --server <host> --port <n> --auth-mode <mode> --from-address <email> [--tls-mode <mode>] [--credentials <value>]
 ```
 
 ### Security Commands
 ```
 scadabridge security api-key list
-scadabridge security api-key create --name <name>
-scadabridge security api-key update --id <id> --enabled <bool>
-scadabridge security api-key delete --id <id>
+scadabridge security api-key create --name <name> --methods <comma-separated-method-names>
+scadabridge security api-key update --key-id <id> --enabled <bool>
+scadabridge security api-key set-methods --key-id <id> --methods <comma-separated-method-names>
+scadabridge security api-key delete --key-id <id>
 scadabridge security role-mapping list
 scadabridge security role-mapping create --ldap-group <group> --role <role>
 scadabridge security role-mapping update --id <id> [--ldap-group <group>] [--role <role>]
 scadabridge security role-mapping delete --id <id>
-scadabridge security scope-rule list [--mapping-id <id>]
+scadabridge security scope-rule list --mapping-id <id>
 scadabridge security scope-rule add --mapping-id <id> --site-id <id>
 scadabridge security scope-rule delete --id <id>
 ```
 
-### Audit Log Commands
+### Configuration-Change Audit Commands
+
+The `audit-config` group queries the configuration-change audit trail (the `IAuditService`
+record of admin edits). `audit-log` is a deprecated alias that still works but emits a
+warning; migrate scripts to `audit-config`.
+
 ```
-scadabridge audit-log query [--user <username>] [--entity-type <type>] [--action <action>] [--from <date>] [--to <date>] [--page <n>] [--page-size <n>]
+scadabridge audit-config query [--user <username>] [--entity-type <type>] [--action <action>] [--from <date>] [--to <date>] [--page <n>] [--page-size <n>]
 ```
 
-The legacy `audit-log query` above targets the original configuration-change audit
-(IAuditService) surface. The new centralized Audit Log component (#23) is exposed via
-the `scadabridge audit` group below.
+The new centralized Audit Log component (#23) is exposed via the `scadabridge audit` group below.
 
 ### Centralized Audit Commands
 
@@ -230,7 +234,7 @@ require the `OperationalAudit` permission; `audit export` additionally requires
 exit code 2) on denial.
 
 ```
-scadabridge audit query --since <t> [--until <t>] [--channel <c>] [--kind <k>] [--status <s>] [--site <s>] [--instance <i>] [--target <t>] [--actor <a>] [--correlation-id <id>] [--errors-only] [--page <n>] [--page-size <n>]
+scadabridge audit query [--since <t>] [--until <t>] [--channel <c>] [--kind <k>] [--status <s>] [--site <s>] [--target <t>] [--actor <a>] [--correlation-id <id>] [--execution-id <id>] [--parent-execution-id <id>] [--errors-only] [--page-size <n>] [--all]
 scadabridge audit export --since <t> --until <t> --format csv|jsonl|parquet --output <path> [--channel <c>] [--kind <k>] [--status <s>] [--site <s>] [--target <t>] [--actor <a>]
 scadabridge audit verify-chain --month <YYYY-MM>
 ```
@@ -298,10 +302,21 @@ scadabridge db-connection delete --id <id>
 scadabridge api-method list
 scadabridge api-method get --id <id>
 scadabridge api-method create --name <name> --script <code> [--timeout <seconds>] [--parameters <json>] [--return-def <json>]
-scadabridge api-method update --id <id> [--script <code>] [--timeout <seconds>] [--parameters <json>] [--return-def <json>]
+scadabridge api-method update --id <id> --script <code> [--timeout <seconds>] [--parameters <json>] [--return-def <json>]
 scadabridge api-method delete --id <id>
 ```
 
+### Bundle Commands (Transport #24)
+
+```
+scadabridge bundle export --output <path> [--passphrase <phrase>] [--all] [--include-dependencies] [--templates <names>] [--shared-scripts <names>] [--external-systems <names>] [--db-connections <names>] [--notification-lists <names>] [--smtp-configs <names>] [--api-methods <names>] [--source-environment <env>]
+scadabridge bundle preview --input <path> [--passphrase <phrase>]
+scadabridge bundle import --input <path> [--passphrase <phrase>] [--on-conflict skip|overwrite|rename]
+```
+
+Inbound API keys are not transported between environments — re-create them on the destination via CLI or UI.
+Bundle commands use a 5-minute timeout.
+
 The `--format json|table` option is recursive and accepted on every command above.
 
 ## Configuration