Add --quiet flag, --json output, and config permission check

- Add global --quiet/-q flag to suppress non-error output
- Add --json flag to verify, snapshot rm, and prune commands
- Add config file permission check (warns if world/group readable)
- Update TODO.md to remove completed items

internal/cli/verify.go

@@ -49,6 +49,7 @@ The command will fail immediately on any verification error and exit with non-ze
 				LogOptions: log.LogOptions{
 					Verbose: rootFlags.Verbose,
 					Debug:   rootFlags.Debug,
+					Quiet:   rootFlags.Quiet || opts.JSON, // Suppress log output in JSON mode
 				},
 				Modules: []fx.Option{},
 				Invokes: []fx.Option{
@@ -61,12 +62,14 @@ The command will fail immediately on any verification error and exit with non-ze
 									if opts.Deep {
 										err = v.RunDeepVerify(snapshotID, opts)
 									} else {
-										err = v.VerifySnapshot(snapshotID, false)
+										err = v.VerifySnapshotWithOptions(snapshotID, opts)
 									}
 
 									if err != nil {
 										if err != context.Canceled {
-											log.Error("Verification failed", "error", err)
+											if !opts.JSON {
+												log.Error("Verification failed", "error", err)
+											}
 											os.Exit(1)
 										}
 									}
@@ -89,6 +92,7 @@ The command will fail immediately on any verification error and exit with non-ze
 	}
 
 	cmd.Flags().BoolVar(&opts.Deep, "deep", false, "Perform deep verification by downloading and verifying all blob contents")
+	cmd.Flags().BoolVar(&opts.JSON, "json", false, "Output verification results as JSON")
 
 	return cmd
 }