fix(install): add CLI option validation, download-only wiring, and apcu-prefix implicit enable

- Restrict --prefer-install to source/dist/auto and --audit-format to
  table/plain/json/summary via clap value_parser
- Error when --prefer-install is combined with --prefer-source/--prefer-dist
- Wire --download-only through InstallConfig to skip autoloader and installed.json
- Implicitly enable --apcu-autoloader when --apcu-autoloader-prefix is set
- Apply same validation fixes to update, require, remove, create-project commands

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/crates/mozart/src/commands/require.rs b/crates/mozart/src/commands/require.rs
index 2082f43..bfd120e 100644
--- a/crates/mozart/src/commands/require.rs
+++ b/crates/mozart/src/commands/require.rs
@@ -59,7 +59,7 @@ pub struct RequireArgs {
     pub no_audit: bool,
 
     /// Audit output format
-    #[arg(long)]
+    #[arg(long, value_parser = ["table", "plain", "json", "summary"])]
     pub audit_format: Option<String>,
 
     /// Do not block on security advisories
@@ -777,6 +777,7 @@ pub async fn execute(
                 classmap_authoritative: args.classmap_authoritative,
                 apcu_autoloader: false,
                 apcu_autoloader_prefix: None,
+                download_only: false,
             },
         )
         .await?;