feat(cli): add migrate-customizations command with PR creation

Signed-off-by: Greg Allen <gallen@redhat.com>
Signed-off-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Greg Allen <gallen@redhat.com>

Author: ggallen

docs/guides/dev/cli-internals.md

@@ -12,8 +12,12 @@ fullsend
 │   ├── analyze      <org>                   # Health check installed state
 │   ├── enable
 │   │   └── repos    <org> [repo...]         # Enable agent on repos
-│   └── disable
-│       └── repos    <org> [repo...]         # Disable agent on repos
+│   ├── disable
+│   │   └── repos    <org> [repo...]         # Disable agent on repos
+│   └── migrate-customizations               # Migrate customized/ → config agents
+│       ├── --fullsend-dir <dir>             #   Base directory with .fullsend layout
+│       ├── --repo <owner/repo>              #   Target repo for migration PR
+│       └── --dry-run                        #   Preview changes without PR
 ├── mint                                     # Token mint management
 │   ├── deploy                               # Deploy/update mint Cloud Function
 │   ├── add-role       <role>                # Register role PEM + ROLE_APP_IDS entry
@@ -549,6 +553,7 @@ var executableFiles = map[string]struct{}{
 |------|-------|---------|
 | `internal/cli/root.go` | ~34 | CLI entry point, command registration |
 | `internal/cli/admin.go` | ~2415 | Install/uninstall/analyze/enable/disable |
+| `internal/cli/migrate.go` | ~520 | Migrate customized/ overrides to config-driven agents |
 | `internal/cli/mint.go` | ~1022 | Mint deploy/enroll/unenroll/status |
 | `internal/cli/inference.go` | ~408 | Inference WIF provision/status |
 | `internal/cli/github.go` | ~966 | GitHub setup/set/status/uninstall/sync-scaffold/enroll/unenroll |

internal/cli/admin.go

@@ -50,6 +50,7 @@ func newAdminCmd() *cobra.Command {
 	cmd.AddCommand(newEnableCmd())
 	cmd.AddCommand(newDisableCmd())
 	cmd.AddCommand(newForeignCmd())
+	cmd.AddCommand(newMigrateCustomizationsCmd())
 	return cmd
 }