* fix(native): remove completed signing capture limitation * fix(cli): keep the WASM command timeout optional * fix(cli): preserve WASM timeout help metadata * test(pe): reuse compiled CLI startup for resource acceptance * fix(cli): use upstream exact-optional timeout semantics