Harden M9: Ed25519 attestation, full SHA-256 integrity, locked-by-default, prompt improvements, registry verification

src/cmdforge/cli/picker.py

@@ -479,6 +479,19 @@ def main():
     # Use stderr for UI if stdout is piped, so tool output stays clean
     _ui_out = sys.stderr if not sys.stdout.isatty() else sys.stdout
 
+    try:
+        from ..usage import get_suggestions
+        suggestions = get_suggestions()[:3]
+        if suggestions:
+            _write(f"{GREEN}Frequent pipelines you could save as tools:{RESET}\n")
+            for item in suggestions:
+                _write(
+                    f"  {' | '.join(item['tools'])} "
+                    f"{DIM}({item['count']} uses){RESET}\n"
+                )
+    except (OSError, ValueError):
+        pass
+
     try:
         with TTYInput() as tty_input:
             result = run_picker(tty_input)