Summary

• Adds uselesskey profiles for a compact profile table.
• Adds uselesskey profile <name> --explain for generated files, proof commands, posture, and boundaries.
• Documents CLI profile discovery from the start-here and contract-pack pages.
• Advances the active goal: cli-profile-discovery is done and cli-proof-handoff is ready.

Files added/changed

• crates/uselesskey-cli/src/main.rs
• crates/uselesskey-cli/tests/cli.rs
• docs/contract-packs/README.md
• docs/how-to/start-here.md
• .uselesskey/goals/active.toml

Validation

• cargo test -p uselesskey-cli --all-features profile
• cargo run -p uselesskey-cli -- profiles
• cargo run -p uselesskey-cli -- profile webhook --explain
• cargo xtask docs-sync --check
• cargo xtask typos
• cargo +nightly xtask pr-lite
• cargo xtask mutants-pr --changed
• cargo clippy -p uselesskey-cli --all-features --all-targets -- -D warnings
• git diff --check

Notes:

• Plain cargo xtask pr-lite failed locally because this shell used stable Rust for cargo fuzz build; rerunning as cargo +nightly xtask pr-lite passed.
• Local cargo xtask pr passed fmt, clippy, CLI tests, and BDD after the formatting fix, then failed at the Windows fuzz runtime with STATUS_DLL_NOT_FOUND for the ASAN DLL. The hosted Linux pr check is the authoritative PR gate for this branch.
• The first hosted mutation run exposed CLI profile-output coverage gaps; this PR now adds integration tests for profiles and profile webhook, and local cargo xtask mutants-pr --changed passes with 12 caught / 1 unviable.

Non-goals

• No proof handoff CLI command in this PR.
• No doctor command, README rewrite, or user-path smoke implementation.
• No new profiles, fixture families, public claims, badges, shipper work, dependency churn, or no-panic baseline work.

What this enables next

• Next PR: feat(cli): add proof handoff commands.