Migrate entire experts to base16 palette

[computermode]

https://entire.io/gh/entireio/cli/trails/736

What

Stacked on #1542. That PR migrated every TUI color to the base16 palette. entire experts was created later, which still shipped its own Tailwind-400 hexes and 256-color codes and therefore ignored the user's terminal theme.

This PR adds experts so it follows the terminal like the rest of the CLI.

How

Routed every experts style through cmd/entire/cli/palette, matching the mappings the base PR established:

Old value	Role	New
#fb923c (orange)	title, agent, bullet, selected, section	palette.Accent (magenta)
#22d3ee (cyan)	label, file	palette.Info
#818cf8 (indigo)	facet	palette.Blue
8 / 241 / 245 (grays)	muted, sepBar, help	palette.Muted (dimmest help tier gets Faint(true))

Updated the self-contained TestRenderExpertsWithStylesUsesEntirePalette fixture to the palette constants so its assertion matches the migration (it was named for the palette but hardcoded the old hexes).

Verification

• mise run fmt && mise run lint — clean (0 issues)
• go build ./... — passes
• go test ./cmd/entire/cli -run Experts — passes
• Grep confirms no #rrggbb or 256-color codes remain in the experts files.
• Visual smoke test recommended (dark + light): entire experts plain output and the interactive TUI — confirm accents/help text stay readable and follow the terminal theme.

🤖 Generated with Claude Code

---

Note

Medium Risk
Touches git hooks, checkpoint formats, and CI secrets handling across many packages; regressions could affect user repos or E2E signal, though most paths add tests and defensive gating.

Overview
This is a broad 0.7.8-scale change set rather than a single feature: it ships checkpoint/metadata evolution, agent and import coverage, Trail automation prompt retuning, and CI/security workflow updates together with doc and changelog entries.

Trail runners (.entire/runners/trail-*.json) replace generic evaluators with Entire CLI–specific instructions: Go/mise test gates, destructive git ops, hooks, condensation/redaction, command-layout drift, and interactive-only CLI gaps.

Checkpoints add refs-v1 (CheckpointVersionRefsV1), compact_transcript_start on session metadata (full compact transcript.jsonl per checkpoint, with legacy delta semantics), plus related tests and doc updates in CLAUDE.md / API types.

Agents & CLI: new entire agent-help (live cobra tree, --json, trail gating); session adopt and agent-safe non-interactive guidance; Copilot skips lifecycle hooks for toolu_ subagent session IDs; Codex uses Windows cmd.exe hook wrappers when sh probing fails and re-syncs hook commands on reinstall; Pi gains review/generate/model-list support; entire import registry expands (Cursor, Pi, Factory, Codex, Copilot, Gemini) with shared discover/split helpers; foreground resume command specs for launchable agents.

CI: PR canary runs Vogon against git-branch and git-refs (E2E_CHECKPOINT_STORE); new manual e2e-checkpoint-store workflow; E2E tightens Copilot token exposure (persist-credentials: false, token only on copilot legs), roger-roger on a non-rerun task, and Slack red/yellow failure tiers; minor action pin bumps; ireturn removed from .golangci.yaml.

Docs/release: CHANGELOG.md 0.7.8 notes, README Homebrew brew trust, Codex features.hooks wording.

^{Reviewed by Cursor Bugbot for commit 595199d. Configure here.}

[Copilot]

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.