[Feat] Show target instance before deploy, stop, destroy and compact

[bean1352]

What

Prints the resolved instance name and IDs before deploy, deploy sync-config, deploy service-config, stop, destroy and compact do anything, so you can see which instance is about to change. status prints the target first as well, with the API URL for self-hosted instances. JSON and YAML output are unchanged.

deploy and deploy service-config also warn when service.yaml has a different name than the instance, because deploying renames it.

Dry run

All deploy commands accept --dry-run. It prints the target instance, runs the validations, and stops before deploying or provisioning. It also shows what would change:

• a diff of the local sync config against the deployed one
• the service config sections that differ, by name only, so no values or secrets end up in a log

When the instance is deprovisioned, a real deploy provisions it first. The dry run says so and skips the sync config validation that needs a running instance.

stop and destroy already require --confirm=yes, so they are unchanged.

Notes

• Adds diff (jsdiff) as a direct dependency of the CLI. It was already in the lockfile as a transitive dependency.
• Connections that pass a password with secret: !env ... always show replication as changed, because the value is sent again. This is documented in the usage docs.

AI disclosure

I used Claude to research the codebase and implement the change. I reviewed and tested it myself.

[LucDeCaf]

I like this idea, looks good 👍

[LucDeCaf]

Tested this on my side, looks good