[HIGH] Both CLI plugins route every failure through a debug logger that is disabled by default

[Aniketvish0]

Migrated from armoriq/conmap-auto#714.

Fix lands in: armoriq/armorclaude and armoriq/armorcodex. Filed here because conmap-auto is this session's tracker for CLI/SDK work.

Line refs from origin/main: armorclaude @ 688bbc3 (AC), armorcodex @ 72d9e13 (AX).

AC engine.mjs:287-291 / AX engine.mjs:125-129 gate all logging on config.debug, default false (AC config.mjs:179, AX config.mjs:181).

git grep for console.log|warn|error across AC scripts/ returns 3 hits, all in install.mjs.

Every failure in the 1531-line enforcement engine — crypto verification, policy sync, audit loss, plan-capture failure — is invisible in a default install.

Ask

Route enforcement-affecting failures to stderr unconditionally at error level, independent of the debug flag.

[Aniketvish0]

Filed in both CLI plugin repos — the defect has a distinct instance in each.
Companion: armoriq/armorClaude#114