"""pipeline.cli — sanctioned CLI entry points (CP-10)."""