✨ feat(kebab-cli): emit error.v1 ndjson on stderr in --json mode (fb-27)

Wraps the existing `Err(e)` arm with a `cli.json` branch:
- `--json`: stderr ndjson `error.v1` via wire_error_v1
- non-`--json`: legacy `error: <msg>` text path (unchanged)

exit_code() unchanged — RefusalSignal/NoHitSignal/DoctorUnhealthy
still drive 1/1/3.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

crates/kebab-cli/src/main.rs

@@ -281,6 +281,13 @@ fn main() -> ExitCode {
             // Refusals at exit code 1 print to stdout (already done by the
             // caller); errors go to stderr.
             if code != 1 {
+                if cli.json {
+                    let v1 = error_classify::classify(&e, cli.verbose);
+                    let v = wire::wire_error_v1(&v1);
+                    eprintln!("{}", serde_json::to_string(&v).unwrap_or_else(|_| {
+                        "{\"schema_version\":\"error.v1\",\"code\":\"generic\",\"message\":\"serialize failed\"}".to_string()
+                    }));
+                } else {
                     eprintln!("error: {e}");
                     if cli.verbose {
                         for cause in e.chain().skip(1) {
@@ -288,6 +295,7 @@ fn main() -> ExitCode {
                         }
                     }
                 }
+            }
             ExitCode::from(code)
         }
     }