[codex] fix cli argv parsing and sdk parity

[MajorTal]

Summary

Fixes the requested TDD bug batch:

• Overhauls the affected per-command CLI flag handling for --flag=value, unknown flag rejection, numeric validation, and structured blob upload failures.
• Tightens active-project fallback so mistyped project IDs no longer silently route selected commands to the active project, while preserving intentional active-project shorthand where it is useful.
• Replaces misleading example project IDs with prj_... examples across CLI help/docs.
• Adds SDK methods and CLI-style aliases for the missing parity gaps, including projects.sql, projects.rest, projects.applyExpose, projects.getExpose, auth.providers, scoped wrappers, and alias ergonomics.

Root Cause

Several CLI modules had local, permissive flag loops that silently ignored unknown options, did not normalize equals-form flags, and parsed numeric values with parseInt without range checks. Project command routing also relied on a broad active-project heuristic that treated non-prj_ first positionals as command arguments even when they were likely mistyped project IDs. The SDK sync map still marked some CLI capabilities as CLI-only even though they should be available through the SDK.

Validation

• node --test cli-argv.test.mjs
• npm run build && npm test && npm run test:docs
• git diff --check