openvet query

TODO: write me. query is the read-only inspection surface — useful for debugging “why did check reject this?”, listing audits for a given package, or dumping a log’s current head and signature chain. Document the subcommands once they stabilise.