Refactor CLI root flag boundaries

[jsugg]

Summary

• add shared CLI root-boundary helpers so repo, asset, project, and source roots have literal semantics
• migrate runtime, devflow, ACP, baseline, and recovery surfaces to the correct canonical flags while keeping deprecated repo-root compatibility paths
• update service templates, workflows, docs, tests, and helper fixtures to the new boundary vocabulary