Base v1.6.1

Added

• Added basectl trust status|allow|revoke to inspect and manage local
  manifest-command approval records under Base-managed state.
• Enforced manifest-command trust before basectl test, run, build,
  demo, and activate execute project-owned manifest code, while preserving
  dry-run and list inspection paths before approval.

Changed

• Surfaced pinned Homebrew installer variables in the default first-mile
  bootstrap path so security-conscious users can choose a verified installer
  before running the mutable official Homebrew installer.
• Reused the external base-bash-libs GitHub CLI helpers in basectl gh and
  basectl repo, and updated the pinned CI dependency to the helper-library
  commit that provides them.
• Reused base-bash-libs temp-file cleanup helpers in post-bootstrap Bash
  commands that create pull request bodies, CI capture files, setup probes, and
  profile comparison files.
• Reused base-bash-libs argument and string helpers in focused Bash
  subcommands, including export-context option parsing, CSV joins, and setup
  profile splitting.

Fixed

• Clarified basectl repo init help and docs so current-checkout usage,
  GitHub setup, local commits, pushes, and the --pr workflow are no longer
  conflated.