feat(oabctl): fix bootstrap, create, apply, and exec commands

[chaodu-agent]

Summary

Multiple fixes and improvements to oabctl CLI:

Bootstrap

• Fix non-ASCII em dash in SG description (AWS rejects non-ASCII)

Create (oabctl create)

• Use GHCR image URIs (ghcr.io/openabdev/openab*) instead of ECR
• Add all backends: kiro, claude, codex, gemini, copilot, opencode, hermes, grok, cursor, mimocode, antigravity
• Add CPU/memory sizing selection with Fargate-valid combinations
• Always create dedicated SG per agent (no selection prompt)
• Reuse existing SG if duplicate name exists

Apply (oabctl apply)

• Inject config.toml as base64 env var (CONFIG_B64) — no aws CLI needed in container
• Add awslogs log configuration to container definition
• Add execution role and task role ARNs to task definition
• Enable ECS Exec on service create/update
• Use ecsctl's wait_for_stable (better progress output, no 5-min timeout)

Exec (oabctl exec)

• Resolve agent name directly from ECS (no ecsctl alias dependency)
• oabctl exec kiro-demo -- bash finds running task automatically

Other

• Default --cluster to oab for get/delete commands
• Add Rust build cache to CI workflow

Build

gh workflow run build-oabctl.yml --ref fix/bootstrap-sg-description -f target=macos-arm64