feat(registry): beta enablement + interactive wizards + active-profile fix

[hi-lei]

Summary

Promotes the verda registry command tree from an env-gated pre-release to beta, and brings every subcommand's TUI in line with the s3 command's interactive design. Driven by hands-on testing against a live VCR project — including diagnosing the credential permission model (robot creds can list repos + Docker v2 tags but are often denied Harbor's artifacts API).

What changed

Enablement & profiles

• Remove the VERDA_REGISTRY_ENABLED gate — registry registers unconditionally and shows registry (beta) in verda --help via the shared cmdutil.TagAnnotation.
• Active-profile resolution (resolveProfile: explicit --profile > VERDA_PROFILE/auth.profile > default) across all subcommands, so reads follow verda auth use like the rest of the CLI. Fixes the reported registry_credential_expired where configure wrote to the active profile but reads hardcoded default. --profile now defaults to "".

Interactive wizards (aligned with s3)

• configure: profile picker + a manual credential-name + secret entry path (endpoint derived from vcr-{project_id}+name) alongside the docker-login paste path; wires --docker-config; overwrite-confirm guard when a profile already holds creds; trimmed Long help.
• ls: action-menu drill-down (Get pull URL / Delete image(s)) with a filterable tag picker that prints the copy-pasteable pull reference; falls back to the Docker v2 tag list when Harbor's artifacts API returns access_denied; graceful access-denied handling instead of an error loop.
• tags: interactive filterable tag picker on a TTY (table when piped / -o json); bare tags returns a friendly error pointing to tags <repo> / ls.
• copy: interactive wizard (source → access → scope → destination → confirm) modeled on s3 cp, running the same pipeline as the flag path on confirm.
• push: no-daemon fallback wizard (source type → path → repo/tag) instead of dead-ending with a JSON error.
• delete: exits cleanly on access_denied instead of looping.
• Rename login → configure-docker (alias login retained) for clarity.

Bug fixes

• Interactive pickers use cmd.Context() rather than the short per-request --timeout, so prompts no longer get canceled mid-input.
• --src-auth basic validates --src-username before reading stdin, so a one-shot piped secret isn't drained on the error path.

Testing

• make test (go test + golangci-lint) green; pre-commit hooks (gofmt/goimports/golangci-lint/unit tests) pass.
• Two adversarial review passes (/code-review, adversarial-branch-reviewer, Codex) — confirmed findings fixed.

Notes

• Internal CLAUDE.md doc updates are intentionally excluded from this commit (kept local); the user-facing registry/README.md is included.

🤖 Generated with Claude Code