Expose project scope in local server errors

[sdairs]

Summary

• report the canonical exact project directory for project-scoped server list, stop, and remove lookup, metadata, and state failures
• state that parent .clickhouse directories are not searched and provide fixed recovery commands for running and stopped servers
• preserve bounded structured error codes while adding an optional project field; keep project paths in command output only and out of telemetry
• retain exact-CWD behavior through child directories, nested .clickhouse state, and symlinked working directories without adding a new --project flag

Closes #477

Tests

• isolated subprocess coverage for root versus child scope, nested state, running and stopped servers, symlinked CWDs, metadata/list failures, and JSON/human output
• cargo fmt --all --check
• cargo build -p clickhousectl
• cargo check -p clickhousectl --no-default-features
• cargo test -p clickhousectl (633 unit tests plus all integration suites)
• cargo clippy -p clickhousectl --all-targets -- -D warnings

Stack

• Position: child 9 of 9 in gh-stack #489
• Base: Make local server metadata atomic and concurrency-safe #516 (issue-472-atomic-server-metadata)
• Parent PR is unchanged and should merge first.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 4948a14. Configure here.}

[sdairs]

what about if we check for the presence of a .clickhouse dir in the CWD when a local command is run - and if there isn't one - we can tailor the output to give the message that we dont search for parent .clickhouse dirs must be run from project root

[sdairs]

I think this belongs in this PR rather than a separate issue: it directly improves project-scoped server errors. We should keep it narrow to commands that require existing project state, such as server stop and server remove. When .clickhouse is absent from the current directory, the error should explain that clickhousectl does not search parent directories and that .clickhouse typically lives in the local project root where the server was started. It should not apply to commands such as server start that can initialize project state. We can agree the exact command/error scope before implementing it.

[iskakaushik]

LGTM

[sdairs]

Superseded by #559 in stack #563.