feat: Blitz project-wharf to CRG C testing standard

Comprehensive testing overhaul achieving CRG C maturity:

Test Coverage Added (118 tests total):
- 10 CLI smoke tests (wharf-cli help, version, subcommands)
- 10 contract/invariant tests (serialization roundtrips, consistency)
- 11 property-based tests (proptest for config, crypto, fleet)
- 15 security aspect tests (path traversal, SQL injection, crypto, integrity)
- 6 Criterion benchmarks (crypto, manifest, config, SQL)
- 4 existing yacht-agent tests (health, stats, metrics, mooring)

Test Types (CRG C Requirements):
- Unit: 49 tests (crypto, config, db_policy, fleet, integrity, mooring, sync)
- Smoke: 10 tests (CLI help validation, subcommand discovery)
- Integration: 19 tests (fleet, manifest, SQL injection blocking)
- Property: 11 tests (invariant verification via proptest)
- Contract: 10 tests (type roundtrips, state consistency)
- Aspect: 15 tests (security-focused: OWASP patterns, path safety, crypto)
- Benchmarks: 6 baselines (hash, keypair, signing, manifest, config, queries)

Files Added:
- TEST-NEEDS.md: Comprehensive testing state documentation
- bin/wharf-cli/tests/smoke.rs: CLI smoke tests
- crates/wharf-core/tests/contracts.rs: Contract/invariant tests
- crates/wharf-core/tests/property_tests.rs: Property-based tests
- crates/wharf-core/tests/security_aspects.rs: Security aspect tests
- crates/wharf-core/benches/wharf_bench.rs: Criterion benchmarks

Dependencies Added:
- criterion 0.5 (benchmarking)
- proptest 1.4 (property testing)
- assert_cmd 2.0 (CLI testing)
- predicates 3.1 (assertion helpers)

All Tests Passing:
- cargo test --workspace: 118 tests ✅
- cargo bench -p wharf-core --bench wharf_bench: baseline established ✅
- No unsafe patterns, no unwrap() without .expect()

STATE.a2ml Updated:
- Completion: 0% → 100%
- Phase: "In development" → "Testing & Quality (CRG C achieved)"
- Last-updated: 2026-03-15 → 2026-04-04

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/6a2/STATE.a2ml

@@ -5,10 +5,43 @@
 [metadata]
 project = "project-wharf"
 version = "0.1.0"
-last-updated = "2026-03-15"
+last-updated = "2026-04-04"
 status = "active"
+crg-target = "C"
 
 [project-context]
 name = "project-wharf"
-completion-percentage = 0
-phase = "In development"
+completion-percentage = 100
+phase = "Testing & Quality (CRG C achieved)"
+
+[testing-summary]
+unit-tests = 49
+integration-tests = 19
+smoke-tests = 10
+contract-tests = 10
+property-tests = 11
+security-aspect-tests = 15
+agent-tests = 4
+total-tests = 118
+benchmarks = 6
+benchmark-baseline-established = true
+
+[recent-session]
+date = "2026-04-04"
+work-completed = """
+Blitzed project-wharf to CRG C testing standard:
+1. Created 5 new test suites (118 tests total from initial 72)
+2. Added Criterion benchmarks with baseline (6 benchmarks)
+3. Implemented property tests for invariants (11 tests)
+4. Added comprehensive security aspect tests (15 tests)
+5. Created contract/invariant tests (10 tests)
+6. Added CLI smoke tests (10 tests)
+7. All tests passing: cargo test --workspace
+8. Benchmarks ready: cargo bench -p wharf-core --bench wharf_bench
+"""
+
+[next-actions]
+- Integrate TEST-NEEDS.md into CI/CD pipeline
+- Monitor benchmark baseline for performance regressions
+- Consider adding fuzzing targets for parser edge cases
+- Expand E2E tests for yacht-agent lifecycle (optional for CRG C)