Split cargo ci subcommands into packages

[clockwork-labs-bot]

Description of Changes

Splits the public cargo ci tool into the same trampoline-style layout as SpacetimeDBPrivate#3631.

The root tools/ci package is now a thin dispatcher that shells out to one package per top-level command under tools/ci/commands/:

• test
• lint
• wasm-bindings
• dlls
• smoketests
• keynote-bench
• update-flow
• cli-docs
• self-docs
• global-json-policy
• publish-checks
• typescript-test
• version-upgrade-check
• docs
• other-workflows

This keeps command dependencies scoped to the packages that actually need them while preserving the existing cargo ci <command> entry point.

Also moves the existing smoketest, keynote bench, CLA assistant, and CODEOWNERS code into the corresponding command packages, adds tools/ci/common for shared repo-root helpers, updates CODEOWNERS paths, and regenerates tools/ci/README.md.

API and ABI breaking changes

N/A

Expected complexity level and risk

3

This is mostly mechanical, but it touches CI command routing and workspace membership. The main risk is preserving argument forwarding behavior for existing workflow invocations.

Testing

• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo metadata --no-deps --format-version 1
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo fmt --all -- --check
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo check -p ci -p ci-common -p ci-test -p ci-lint -p ci-wasm-bindings -p ci-dlls -p ci-smoketests -p ci-keynote-bench -p ci-update-flow -p ci-cli-docs -p ci-self-docs -p ci-global-json-policy -p ci-publish-checks -p ci-typescript-test -p ci-version-upgrade-check -p ci-docs-build -p ci-other-workflows
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo run -p ci -- --help
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo run -p ci -- smoketests --help
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo run -p ci -- other-workflows --help
• PATH=/Users/clockworklabs/.rustup/toolchains/1.93.0-aarch64-apple-darwin/bin:$PATH cargo run -p ci -- self-docs --check
• git diff --check

[bfops]

why is this special case needed?

[clockwork-labs-bot]

This preserves the existing workflow invocation cargo ci smoketests -- --test-threads=1. Root clap consumes the user-facing --, but the split ci-smoketests binary still needs a child -- before test-runner flags so clap does not treat --test-threads as a smoketest option. I left the forwarding behavior in place and fixed the docs generator in c1e9dbd32 so smoketest help now comes from the actual split binary.