jaasctl CLI

Command	What it does
`jaasctl validate .`	Structural validation only — used as a PR check. Local/direct, no network.
`jaasctl release . --tag vX.Y.Z`	CI-facing HTTP client — publishes a tagged release via OIDC or PAT auth.
`jaasctl guardrails push ./rules --tenant-id … --token …`	Syncs local rule YAML files to a tenant’s custom guardrail rule library.
`jaasctl guardrails validate ./rules/no-todo.yaml`	Dry-run validates one rule file directly against the guardrails service — no tenant or auth required.