CLI Extensions — Stage 6: provision command #265

Part of the EdgeZero CLI Extensions effort — stage 6 of 8.

Scope: add the provision command — ProvisionArgs (manifest, adapter, dry_run) and run_provision. Iterates every id in [stores.<kind>].ids and shells out per adapter: axum no-op (local stores); cloudflare wrangler kv namespace create + wrangler.toml [[kv_namespaces]] writeback; fastly fastly <kind>-store create + [setup.*] / [local_server.*] fastly.toml writeback (store IDs resolved on demand by config push); spin KV-label spin.toml writeback only (config/secret variables are not provisioned here). --dry-run prints would-be commands/edits and performs nothing.

Ship gate: per-(adapter, kind) mock-runner expectations; golden ID-extraction parsers; temp-fixture writeback verified for wrangler.toml / fastly.toml / spin.toml; --dry-run performs nothing.

Design spec: §12 — Implementation plan: Stage 6.