feat(cli): fail the update when a project needs manual review

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

packages/cli/test/migrate-legacy-api-body.test.ts

@@ -112,4 +112,5 @@ test("a full update run leaves a legacy bare body file byte-identical and report
 
   expect(after).toBe(SOURCE);
   expect(report.needsReview.some((entry) => entry.includes("ssrUsers"))).toBe(true);
+  expect(report.parseFailures).toEqual([]);
 });