Add Broker variant to Commands enum with BrokerArgs (flatten), route to execute_broker_command in match block (no JWT required), exit(1) on check failure. Clone config.api_gateway_url to avoid partial move. Add two CLI parsing tests for broker check. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>