feat: add stable JSON output and logging contracts

[codeforester]

Summary

• add versioned success and error envelopes with stable code, type, message, details, and run_id fields
• add opt-in LifecycleOptions.json machine mode that captures command stdout into one JSON record and keeps human defaults unchanged
• add bounded, redacted JSON logs with UTC timestamps, level, logger, message, schema version, and run ID
• add recursive secret redaction, JSON-mode log retention defaults, docs, API exports, and contract/security tests

Closes #63

Verification

• python -m pytest (full suite)
• python -m mypy --strict examples/typed_consumer.py
• ./tests/validate.sh
• uv build --out-dir /private/tmp/base-cli-build-63

Depends on the merged #52, #58, and #59 work.