Epic: backfill examples for remaining 61 commands missing docs

[cdot65]

Goal

Replace every remaining !!! warning "Example needed" on docs/cli/**/*.md (61 commands across DLP, Red Team, Model Security, Runtime). Predecessor epic #83 closed 49/110 gaps; this epic closes the rest.

Why each gap exists

Every command on docs/cli/examples/.missing-allowlist is there for one of three reasons:

• Upstream API defect (server returns 4xx/5xx for valid input) → label upstream-bug
• SDK defect (schema mismatch, missing serialization) → file in cdot65/prisma-airs-sdk, label bug
• CLI defect (key mangling, missing flag, broken codepath) → label bug
• Deferred for safety (destructive op on shared tenant; no defect) → needs dedicated test tenant or scratch namespace

Sub-issues (4 categories)

• DLP — 12 commands
• Red Team — 27 commands
• Model Security — 14 commands
• Runtime (non-DLP) — 8 commands

Each category issue tracks per-command sub-issues with root-cause analysis.

Definition of done

• Every command on .missing-allowlist has a tracking sub-issue with explicit root cause (upstream / SDK / CLI / safety-defer).
• Every defect found gets a tracking issue with the correct label.
• .missing-allowlist entries each have a # Blocked by … comment line above them pointing to the tracking issue.
• Epic Epic: Add live input/output examples to all CLI docs #83's meta-issue docs: destructive-op examples deferred (need dedicated test tenant) #126 gets refined or closed in favor of this granular tracking.