feat(cli): aura campaign run — the executor verb over the MemberRunner driver (0107 tasks 8-9)

campaign_run.rs: target resolution (file is register-then-run sugar;
bare 64-hex is the canonical id — #198 decision 1), project gate before
any store write, zero-fault referential gate, process fetch + v1
preflight, then aura_campaign::execute with the CLI MemberRunner over
the shipped loaded-blueprint convention: per-member blueprint reload,
reduce-mode wrap, unique suffix-join of raw campaign axis names onto
the wrapped param_space, windowed real data via the shipped ms->ns
source seam (absent archive/zero-bar windows -> NoData). Emission:
family_table / selection_report lines gated on the doc's emit list
(names debug_asserted against emit_vocabulary), the campaign_run
record line always, persist_taps deferred LOUDLY on stderr before
execution (F7 lesson), zero-survivor cells noted on stderr with exit 0.
exec_fault_prose/member_fault_prose keep the Debug-free house seam.

Seam tests: 8 campaign_run_* e2e tests incl. outside-project, bogus
target, unknown id, v1-boundary (mc process registers fine, run
refuses), persist_taps ordering, and the gated real-data
sweep->gate->walkforward e2e — which ran its full assert path on this
host (local GER40 2024-09 archive) rather than the data-less skip.
Also: exec.rs campaign-id guard tightened to lowercase hex, matching
is_content_id and the store's self-keyed form (review nit).

Gates: workspace 975/0, clippy -D warnings clean.

refs #198

crates/aura-cli/Cargo.toml

@@ -17,6 +17,10 @@ aura-engine = { path = "../aura-engine" }
 aura-composites = { path = "../aura-composites" }
 aura-registry = { path = "../aura-registry" }
 aura-research = { path = "../aura-research" }
+# aura-campaign: campaign-execution semantics (preflight, cell loop, stage
+# sequencing, realization record); the CLI implements its MemberRunner seam
+# and renders its outcome (#198).
+aura-campaign = { path = "../aura-campaign" }
 aura-std = { path = "../aura-std" }
 aura-ingest = { path = "../aura-ingest" }
 # data-server: the local M1 archive `aura run --real` streams from. Mirrors the