feat(cli): promote profile to a top-level command

.agents/skills/openshell-cli/SKILL.md

@@ -106,10 +106,13 @@ openshell sandbox delete <name>
 Providers supply credentials and provider-specific configuration to sandboxes. Provider types come from built-in and custom profiles; do not rely on a hard-coded type list. Discover the profiles available on the selected gateway:
 
 ```bash
-openshell provider list-profiles
-openshell provider list-profiles --output json
+openshell profile list
+openshell profile list --output json
+openshell profile describe <id>
 ```
 
+`openshell provider list-profiles` remains available as an alias.
+
 ### Create a provider from local credentials
 
 ```bash
@@ -799,7 +802,7 @@ $ openshell sandbox upload --help
 | Download files from sandbox | `openshell sandbox download <name> <path>` |
 | Create provider | `openshell provider create --name N --type T --from-existing` |
 | List providers | `openshell provider list` |
-| Discover provider profiles | `openshell provider list-profiles` |
+| Discover provider profiles | `openshell profile list` |
 | List attached providers | `openshell sandbox provider list <name>` |
 | View settings | `openshell settings get [name]` |
 | Configure managed inference | `openshell inference set --provider P --model M` |

.agents/skills/openshell-cli/cli-reference.md

@@ -105,8 +105,17 @@ openshell
 │   │   ├── update <id> --file <path>
 │   │   ├── lint (--file <path>|--from <dir>)
 │   │   └── delete <id>
+│   │   (aliases of the top-level `profile` command)
 │   ├── update <name> [opts]
 │   └── delete <name>...
+├── profile
+│   ├── list [--type provider] [opts]
+│   ├── describe <id> [opts]
+│   ├── export <id> [opts]
+│   ├── import (--file <path>|--from <dir>)
+│   ├── update <id> --file <path>
+│   ├── lint (--file <path>|--from <dir>)
+│   └── delete <id>
 ├── doctor
 │   └── check
 ├── term
@@ -548,14 +557,24 @@ Update an existing provider without changing its type.
 
 Delete one or more providers by name.
 
-### Provider profiles
+### Profiles
+
+- `openshell profile list [--type provider] [--output table|yaml|json]`
+- `openshell profile describe <id> [--output table|yaml|json]`
+- `openshell profile export <id> [--output table|yaml|json]`
+- `openshell profile import (--file <path>|--from <dir>)`
+- `openshell profile update <id> --file <path>`
+- `openshell profile lint (--file <path>|--from <dir>)`
+- `openshell profile delete <id>`
+
+Every profile is currently a provider profile, so `--type provider` matches the
+full inventory. The filter exists so a caller can pin the type it expects
+without the command changing meaning when other profile types are added.
+
+The original spellings remain available and run the same code:
 
 - `openshell provider list-profiles [--output table|yaml|json]`
-- `openshell provider profile export <id> [--output table|yaml|json]`
-- `openshell provider profile import (--file <path>|--from <dir>)`
-- `openshell provider profile update <id> --file <path>`
-- `openshell provider profile lint (--file <path>|--from <dir>)`
-- `openshell provider profile delete <id>`
+- `openshell provider profile export|import|update|lint|delete ...`
 
 ### Provider credential refresh