refactor(trail): call --repo guard from RunE, keep guard signature

Revert the ensureTrailRepoHasTarget signature change; invoke the guard from the approval RunE bodies and withNumberedTrail (both have *cobra.Command) instead of threading repoOverride through the string-param helpers.