Address PR review findings

Append the server's 404 detail to the mirror-remove error (extracted to a testable helper with coverage), close the review's test gaps (repo create assembly, grant revoke output, real-command list harness), fix stale group doc comments, add a changelog entry for the new output contract, and add a forbidigo guard so cobra Print* (stderr fallback) can't reintroduce the bug this PR fixed.