feat: add --verbose / --debug flag for CLI observability

[ericksoa]

Summary

Add a global --verbose / --debug flag and LOG_LEVEL env var to the NemoClaw CLI. When enabled, log every shell command (with secrets redacted) to stderr for debugging onboard and deploy issues.

Identified during review of #390.