feat(cli): initialize Scoop buckets - #41

Summary

• add a deterministic, local-only release-cli init scoop-bucket command
• generate a root-layout bucket with pinned reusable validation and CRLF checkout policy
• document repository creation, App access, producer wiring, branch protection, and Scoop lifecycle verification

Verification

• mise exec -- moon run root:format
• mise exec -- golangci-lint run --config .golangci.yml ./... --show-stats=false
• mise exec -- go test ./...
• mise exec -- moon run root:build root:protocol
• built a full-commit-stamped CLI and generated meigma/scoop-bucket
• actionlint .github/workflows/manifests.yml on the generated scaffold
• verified the pinned reusable workflow exists at the generated source commit
• verified Git resolves generated text files with eol: crlf