run the golden suite against the CLI too, and pin every delta

Both engines now go through the same 68 cases. 31 produce byte-identical
output; the rest have a recorded CLI expectation and a reason in DELTAS.md,
the bulk of it being that the CLI does not shell out to a recursive make and
calls compose once per project.

Fixed while comparing: the CLI was missing the COMPOSE_FILE_* defaults, so
overlays such as supabase.labels.yml would not have been loaded at all.

spec/golden/expected.cli/app-run.txt

@@ -0,0 +1,26 @@
+ERROR: unknown command: run
+Usage: myos [options] <command> [stack...] [VAR=value...] [-- args...]
+
+Options:
+ -C DIR work in DIR instead of the current directory
+ -e ENV environment (default: local, or ENV from the config)
+ -H HOSTS run on remote hosts instead (comma separated, or "all")
+ -n, --dry-run print the commands instead of running them
+ -v, --verbose show what myos does
+ -d, --debug show every command
+ -h, --help this help
+
+Commands:
+ up down start stop restart recreate manage the containers of a stack
+ ps logs config exec run inspect and enter them
+ ls [--groups] list the stacks myos can see
+ env [VAR...] show resolved variables
+ doctor check the installation
+ version print the myos version
+
+Stacks:
+ myos up the stack of the current directory
+ myos up host a group, expanded from host=... in a .env or .mk
+ myos up host/fabio a single stack
+ myos up postgres:9.6 a versioned stack
+[exit 2]