feat(harness): add id_from resolution and 77 new catalog entries

Adds dynamic resource ID resolution to the test harness, allowing get
commands and child-resource lists to be tested by first fetching an ID
from the corresponding list command.

- Add resolve_id(): runs a helper pup command, parses JSON, traverses
  a json_path, and caches results by args tuple (human_env only, since
  IDs are mode-independent)
- Modify main test loop to substitute {id} placeholders in args before
  running; gracefully skips with a message when no ID is available
  (empty list, auth fail) rather than failing

New catalog entries — 22 no-ID-required:
  apm troubleshooting list, app-builder list, auth list,
  containers list/images list, cost aws/azure/gcp-config list,
  ddsql table/time-series, integrations list,
  integrations aws cloud-auth persona-mappings list,
  integrations google-chat handles list,
  llm-obs datasets/experiments/projects list, llm-obs spans search,
  reference-tables list, security suppressions list,
  skills list/path, status-pages maintenances list

New catalog entries — 55 ID-dependent via id_from:
  api-keys/app-builder/app-keys get, cases get/projects get/
  notification-rules list, cicd pipelines get, cloud oci tenancies get,
  cost aws/azure/gcp-config get, dashboards get, downtime get,
  error-tracking issues get, events get, fleet agents/deployments/
  schedules get, incidents get/attachments list/postmortem-templates get,
  infrastructure hosts get, integrations aws/google-chat get,
  investigations get, llm-obs experiments dimension-values/events list/
  summary/metric-values, logs archives/custom-destinations/metrics/
  restriction-queries get, monitors get, network devices get/interfaces/
  tags list, network interfaces list, notebooks get, obs-pipelines get,
  on-call teams get/memberships list, reference-tables get, rum apps/
  metrics/playlists/retention-filters get, security rules/suppressions get,
  service-catalog get, slos get/status, static-analysis ast/coverage/
  custom-rulesets/sca get, status-pages pages/components/degradations/
  maintenances get, status-pages components list, synthetics suites/
  tests get, users get

Also fixes obs-pipelines list catalog entry: command now exits 0 with
JSON (was expecting exit 1 from when it was a stub).

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: platinummonkey