feat(cli): add Prime Agent harness with native passthrough and endpoint-isolated extension