ksail cluster repair

Detect and repair known corruption patterns in local state files.

Currently supported repairs:
  - talosconfig-ca: fixes a single-byte BasicConstraints corruption in
    the Talos talosconfig CA that prevents 'cluster update' from
    establishing a Talos client.

Each repair is idempotent and writes a timestamped backup of any file
it modifies.

Usage:
  ksail cluster repair [flags]

Flags:
      --talosconfig string   path to talosconfig (default: ~/.talos/config)

Global Flags:
      --benchmark       Show per-activity benchmark output
      --config string   Path to config file (default: ksail.yaml found via directory traversal)