Harden M9: Ed25519 attestation, full SHA-256 integrity, locked-by-default, prompt improvements, registry verification

src/cmdforge/runner.py

@@ -1234,6 +1234,14 @@ def main():
         else:
             print(output)
 
+    if exit_code == 0 and not args.dry_run:
+        try:
+            from .usage import record_invocation
+            record_invocation(resolved.full_name)
+        except (OSError, ValueError):
+            # Usage discovery is optional and must never break tool execution.
+            pass
+
     sys.exit(exit_code)