fix(dream-cli): _compose_run_with_summary SIGINT cleanup + zero-match fallback

Ctrl-C during a compose operation leaked the mktemp log because there
was no INT/TERM trap. Add trap 'rm -f "$_compose_log"' INT TERM after
mktemp and restore with trap - INT TERM before each return.

The grep | sed | head pipeline exit code is 0 even when grep finds no
matches (head exits 0 on empty input), so the || warn fallback never
fired. Capture the pipeline output to _surfaced and branch on non-empty
to decide between printing matches or emitting the "no error keywords
matched" hint. Correct under set -e today, pipefail-safe going forward.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: yasinBursali

dream-server/dream-cli

@@ -568,23 +568,31 @@ _compose_run_with_summary() {
 
     local _compose_log
     _compose_log=$(mktemp)
+    trap 'rm -f "$_compose_log"' INT TERM
 
     local _rc=0
     docker compose --progress quiet "$@" >"$_compose_log" 2>&1 || _rc=$?
 
     if (( _rc == 0 )); then
         success "${_verb} — done"
         rm -f "$_compose_log"
+        trap - INT TERM
         return 0
     fi
 
     log_error "${_verb} failed:"
-    grep -iE 'error|unhealthy|failed|dependency' "$_compose_log" \
+    local _surfaced
+    _surfaced=$(grep -iE 'error|unhealthy|failed|dependency' "$_compose_log" \
         | sed 's/^/  /' \
-        | head -20 \
-        || warn "(no error keywords matched in compose log)"
+        | head -20 || true)
+    if [[ -n "$_surfaced" ]]; then
+        printf '%s\n' "$_surfaced"
+    else
+        warn "(no error keywords matched in compose log)"
+    fi
     echo ""
     log "Full compose output: $_compose_log"
+    trap - INT TERM
     return "$_rc"
 }