feat: semantic exit codes + stdout/stderr separation

## Summary

Semantic exit codes and proper stdout/stderr separation for agent compatibility.

## Exit Codes

- 0 = success
- 1 = general error
- 2 = usage error
- 3 = not found
- 4 = validation error
- 5 = conflict

## Details

- Diagnostics to stderr
- JSON output to stdout