docs(cli-reference): document status, rollback, and graph command families

[joshua-temple]

What

Part of #411 (PR 1 of several). Adds the three command families missing from cli-reference.md: status (+ env/build/deploy/consistency incl. --fix), rollback (+ preflight/finalize, and the #418 first-env guard), and graph. Every subcommand, flag, and default verified against the current cobra tree.

Notes

• Captures per-command flag differences (status/rollback use --key; graph uses --manifest-key), the required --env on build/deploy status, and the rollback preflight --gha-output keys.
• Documents the fix(rollback): guard the first environment against rollback #418 first-environment guard (rollback fails fast on the trunk-tracking first env; revert via merge) sourced from firstEnvErr/IsFirstEnvironment.

Remaining #411 (separate PRs)

configuration.md field rows; hotfix orphan self-heal docs; the stale in-code reserved-shape comments in types.go; the coverage-matrix callbacks row.

Docs-only; code-verified, no aspirational flags.