check / check (push) Waiting to run
Every command read options only up to its first argument, and check, fetch, freshen, list and export dropped everything after it, so `check DIR --require-signature FPR` passed an unsigned manifest. Options are now read wherever they appear, as urfave/cli v3 does by default, and `--` still ends them. Those five commands refuse a second argument, naming it. TestFlagAfterArgumentIsArgument asserted the defect (`gen DIR -v` read `-v` as a path); a test that `gen -- -x` reads `-x` as a path replaces it. Model: opus-5-5