fix(install): add CLI option validation, download-only wiring, and apcu-prefix implicit enable

- Restrict --prefer-install to source/dist/auto and --audit-format to
  table/plain/json/summary via clap value_parser
- Error when --prefer-install is combined with --prefer-source/--prefer-dist
- Wire --download-only through InstallConfig to skip autoloader and installed.json
- Implicitly enable --apcu-autoloader when --apcu-autoloader-prefix is set
- Apply same validation fixes to update, require, remove, create-project commands

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 3 insertions, 1 deletions

diff --git a/crates/mozart/src/commands/remove.rs b/crates/mozart/src/commands/remove.rs
index 2b1f1ec..d047ad3 100644
--- a/crates/mozart/src/commands/remove.rs
+++ b/crates/mozart/src/commands/remove.rs
@@ -36,7 +36,7 @@ pub struct RemoveArgs {
     pub no_audit: bool,
 
     /// Audit output format
-    #[arg(long)]
+    #[arg(long, value_parser = ["table", "plain", "json", "summary"])]
     pub audit_format: Option<String>,
 
     /// Do not block on security advisories
@@ -430,6 +430,7 @@ pub async fn execute(
                 classmap_authoritative: args.classmap_authoritative,
                 apcu_autoloader: false,
                 apcu_autoloader_prefix: None,
+                download_only: false,
             },
         )
         .await?;
@@ -567,6 +568,7 @@ async fn remove_unused(
                 classmap_authoritative: args.classmap_authoritative,
                 apcu_autoloader: false,
                 apcu_autoloader_prefix: None,
+                download_only: false,
             },
         )
         .await?;