retrofit op seal

Seal the unsealed tail of the oplog. The Seal covers every op from
the first unsealed op through the current tail; subsequent edits to
those ops are detected by `retrofit validate`.

Tail-append only: sealing a sub-range of the unsealed tail is out
of scope.

A range that declares reference data seals only when every reference
record it covers is witnessed, and only when every ExtractTable
child or CopyTable clone of a declared table born in it has a record
of its own (reference-rows-uncaptured): the op moves the source's
rows into the product in every migrated database, so a fresh build
needs them captured.

Run with --help-all for recovery guidance (e.g. removing a Seal
authored on the wrong branch).

Usage:
  retrofit op seal [flags]

Flags:
      --compact string   compact the tail to this frontier file, then seal it, in one write
  -h, --help             help for seal
      --help-all         show extended help (vocabulary, semantics, caveats)
      --reason string    optional reason text recorded on the Seal

Global Flags:
      --as string        output mode: text | json (default "text")
  -C, --chdir string     treat <dir> as the working directory for the entire run
      --config string    retrofit.toml path (overrides discovery; also accepts $RETROFIT_CONFIG)
  -f, --file string      oplog file path; selects a registered [[schema]] path (overrides discovery)
      --no-consolidate   render every advisory occurrence instead of collapsing repeats
  -q, --quiet count      suppress the advisory tier on stderr; stack (-qq) to drop it whole (errors and results still print)
      --schema <name>    registered schema <name> (resolves via the chain when omitted)
  -v, --verbose          reveal info-tier advisories on stderr

Docs: https://docs.retrofit.sh/current/commands/retrofit-op-seal/

Extended help:

If you authored a Seal on the wrong git branch and want to keep
its covered ops, recover with:

    retrofit op unseal

This removes the most-recent Seal record and keeps the covered ops as
the unsealed tail, ready to edit or re-seal.

For an intentional destructive rewind that discards the Seal and the
ops it covers, use:

    retrofit op truncate --drop-seals 1