feat(cli): add registries create command

[manawenuz]

Summary

• Adds arcane-cli registries create — the only CRUD operation missing from the registries subcommand
• Fixes a silent bug in registries update: --password was sending {"password": ...} but the API expects {"token": ...}, so token updates via CLI were being silently ignored
• Updates skills/arcane-cli/SKILL.md with the new command, full flag table, and examples for ghcr.io, Docker Hub, self-hosted HTTP registries, and AWS ECR

New command

arcane-cli registries create --url <registry-host> [flags]

Flag	Default	Description
--url	(required)	Registry host, e.g. ghcr.io, docker.io
--username		Login username
--token		Password or personal access token
--registry-type	generic	generic or ecr
--insecure	false	Allow plain HTTP
--disabled	false	Create in disabled state
--description		Human-readable label
--aws-access-key-id		ECR only
--aws-secret-access-key		ECR only
--aws-region		ECR only

Bug fix

registries update --password was serialising to {"password": "..."} but UpdateContainerRegistryRequest expects {"token": "..."}. Fixed to send the correct key; the flag name --password is preserved for backwards compatibility.

Test plan

• arcane-cli registries create --url ghcr.io --username user --token ghp_xxx creates a registry and prints details
• arcane-cli registries create --url ghcr.io --username user --token ghp_xxx --json returns JSON
• arcane-cli registries create (no --url) returns a usage error
• arcane-cli registries update <id> --password newtoken correctly updates the token
• arcane-cli registries create --registry-type ecr --aws-access-key-id ... --aws-secret-access-key ... --aws-region us-east-1 --url <ecr-url> creates an ECR registry

🤖 Generated with Claude Code

Disclaimer Greptiles Reviews use AI, make sure to check over its work.

To better help train Greptile on our codebase, if the comment is useful and valid Like the comment, if its not helpful or invalid Dislike

To have Greptile Re-Review the changes, mention greptileai.

Greptile Summary

This PR adds the missing registries create subcommand and fixes a silent bug where registries update --password was sending {"password": ...} instead of the {"token": ...} key the API expects, meaning token updates were silently dropped.

• registries create is added with full flag support (--url, --token, --username, --registry-type, --insecure, --disabled, --description, and AWS ECR fields); --url is marked required.
• registries update --password now correctly maps to {"token": ...} in the request body, matching UpdateContainerRegistryRequest.
• skills/arcane-cli/SKILL.md is added to document the full CLI command surface, including examples for ghcr.io, Docker Hub, self-hosted, and AWS ECR.

Confidence Score: 3/5

Safe to merge after fixing the --disabled flag inversion in createCmd.

The createCmd has a flag-handling inversion: it tests cmd.Flags().Changed("disabled") instead of reading registryCreateDisabled directly. A user who explicitly passes --disabled=false will get a registry created in the disabled state — the opposite of their intent. While unusual input, the new command path actively produces wrong data for it.

cli/pkg/registries/cmd.go — specifically the enabled field construction in createCmd.

Prompt To Fix All With AI

Fix the following 1 code review issue. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 1
cli/pkg/registries/cmd.go:248-252
The `enabled` logic uses `cmd.Flags().Changed("disabled")` rather than the flag's actual value. `Changed` returns `true` whenever the flag is explicitly provided, regardless of its value — so `--disabled=false` would also match this branch and create the registry in a *disabled* state, the opposite of what the user requested. Using the flag value directly avoids this inversion.

```suggestion
		req["enabled"] = !registryCreateDisabled
```

_{Reviews (1): Last reviewed commit: "fix(cli): always send required fields in..." | Re-trigger Greptile}

Greptile also left 1 inline comment on this PR.

[manawenuz]

@kmendell ready for review when you get a chance — adds the registries create command to the CLI with full flag support (generic, ECR, insecure registries).

[kmendell]

you can remove this file since i made the updates skills repo for it

[manawenuz]

@kmendell friendly nudge on this one when you have a moment 🙏

For context — registries currently has list, get, update, delete, test, and sync, but no create, so registries can only be added via the web UI. This PR fills that gap with full flag support (generic, Docker Hub, insecure/HTTP, and ECR).

All checks are green, and I also fixed a pre-existing --enabled=false/--disabled=false inversion in the update command while I was in there (flagged by Greptile). Happy to adjust anything if you'd prefer a different shape.