feat(cli): sm new wizard + standalone simple_module_cli distribution

[antosubash]

Summary

Two related improvements to the sm CLI, landing on one branch:

1. Upgraded sm new — now scaffolds a project with any chosen subset of modules (preset or custom) and lands a runnable Celery worker + beat + Redis stack when background_tasks is selected. Wizard or flag-driven; transitive deps auto-resolved.
2. Standalone simple_module_cli distribution — the scaffolder + Typer CLI moves out of simple_module_hosting into a new PyPI package whose only deps are typer + tomlkit. Single sm console script; plugin subcommands (sm host gen-pages, sm users create-admin, sm settings import-from-env) discovered via the simple_module_cli.cli_plugins entry-point group. All sm-* sibling scripts (sm-users, sm-settings, hosting's sm) are gone.

What changed

CLI feature work (sm new)

• New framework/cli/simple_module_cli/{catalog,wizard,recipes,new}.py with a hardcoded module catalog, transitive expand_deps, presets (minimal / standard / full / custom), and a BackgroundTasksRecipe that drops scripts/run_worker.py, docker-compose.yml (redis + worker + beat), docker/worker.Dockerfile, Make targets, and the SM_BG_TASKS_BROKER_URL env entry.
• create_app_project accepts a selected= module list; default standard preset preserves the existing pre-wired set.

Standalone distribution

• New PyPI dist simple_module_cli (importable as simple_module_cli) at framework/cli/, deps: typer>=0.12, tomlkit>=0.13. No framework runtime deps; guarded by framework/cli/tests/test_no_framework_deps.py.
• Click → Typer port across the entire CLI surface.
• Plugin discovery: simple_module_cli.plugins.discover_and_mount walks the simple_module_cli.cli_plugins entry-point group and mounts each plugin as a named subgroup (broken/duplicate plugins log to stderr and are skipped).
• simple_module_hosting keeps its runtime; loses cli/, scaffolding.py, app_project.py, _env.py, and templates/. Gains host_cli.py (Typer app for gen-pages + sync-js-deps).
• users and settings modules drop sm-users / sm-settings console scripts; register Typer apps via the new entry-point group instead. settings/cli.py rewritten as a Typer app.
• Makefile: sm gen-pages → sm host gen-pages; sm sync-js-deps → sm host sync-js-deps.

Release plumbing

• .github/workflows/release.yml publish-pypi matrix gains simple_module_cli. bump_version.py already auto-discovers framework/*/pyproject.toml so no script change needed.

Docs / cleanup

• README.md, CHANGELOG.md, framework/hosting/README.md, and the new framework/cli/README.md updated for the renamed CLI distribution and the sm host/users/settings plugin shape.
• Specs and plans saved under docs/superpowers/{specs,plans}/ for future reference.

Test plan

All gates verified locally; CI runs the same set:

• make ci-python-lint — ruff format + check, all clean
• make ci-python-typecheck — ty, all clean
• make ci-check-file-size — 300-line cap respected
• make ci-js-lint — biome (1 pre-existing warning)
• make ci-js-typecheck — tsc per workspace
• make test-py — 1017 passed, 6 deselected
• make test-js — 8 passed (vitest)
• make build — vite production build
• scripts/check_metadata.py — all package metadata OK
• scripts/check_readmes.py — all READMEs OK
• make doctor — 0 errors (1 pre-existing SM003 warning unrelated)

End-to-end smoke:

• uv run sm --help lists new, create-host, create-module, plus mounted plugins host, users, settings
• uv run sm new demo --yes --preset full --no-install produces a project with scripts/run_worker.py, docker-compose.yml, docker/worker.Dockerfile, Make targets, and the broker env entry

Notes for review

• The simple_module_hosting package no longer ships an sm console script — everything goes through the new simple_module_cli distribution. Fresh installs will need both packages for the full CLI surface (or just simple_module_cli for the scaffolder alone).
• Plugin discovery is intentionally lenient: a broken plugin entry-point logs one line to stderr and is skipped, so sm new keeps working in degraded environments.
• Distribution name uses the underscore form (simple_module_cli) to match simple_module_core / simple_module_hosting / etc., per the convention enforced by scripts/check_metadata.py. PyPI normalizes this to simple-module-cli on the URL side.