Harden M8 trust and guidance workflows

src/cmdforge/runner.py

@@ -1173,6 +1173,11 @@ def main():
         print(f"Searched: {', '.join(e.searched_paths[:3])}", file=sys.stderr)
         sys.exit(1)
 
+    from .tool import deprecation_warning
+    warning = deprecation_warning(tool)
+    if warning:
+        print(warning, file=sys.stderr)
+
     # Check for manifest overrides
     manifest = load_manifest()
     provider_override_from_manifest = None