CLI Overview
vulnlog <command> <file...> [flags]
Every command except init requires one or more Vulnlog files as positional arguments.
Read-only commands like validate accept multiple files.
Output-generating commands like suppress operate on a single file.
No automatic file detection.