v3.28.0

## Highlights

Closes the four remaining root-fix gaps from #2661 (PR #2663):

1. **Repository-level supervisor + worktree leases** (`workspace-lease.ts`, `repo-supervisor.ts`) — exactly one daemon per repository is elected supervisor and owns the recurring AI-worker schedule; every other worktree stays a lease-only participant (15-min TTL heartbeat) running cheap local-only workers. An explicit `daemon trigger --headless` still bypasses the gate (one-off user action, still budget/dedup-governed).
2. **Structured per-launch token telemetry** — `claude --print --output-format json`, parsed leniently via `parseClaudePrintJsonEnvelope()`, receipted through `GlobalAiBudget.recordUsage()`. Any schema mismatch degrades to "no usage captured," never breaks existing analysis-output parsing.
3. **`ruflo daemon budget show|pause|resume`** — independently scriptable budget control surface.
4. **One-time upgrade migration warning** — a pre-existing multi-daemon fleet with AI workers already enabled warns exactly once ever.

`daemon status --all` gains a "Repository Supervisors" panel.

Also fixes a real transitive-dependency fragility: `statusline-generator.ts` no longer pulls in the `semver` package just to resolve the CLI's own version — inlined a minimal, dependency-free version resolver instead.

## Test plan

- 54 new tests across `workspace-lease`, `repo-supervisor`, `claude-print-envelope`, `global-ai-budget`, `daemon-migration-warning-2661`
- 636 relevant tests passing locally (services + daemon + commands-deep)
- Full CI green on [PR #2663](https://github.com/ruvnet/ruflo/pull/2663) (one flaky, unrelated timing test in `@claude-flow/hooks`'s trajectory-graph smoke passed on rerun)

## Packages

| Package | Version |
|---|---|
| `@claude-flow/cli` | 3.28.0 |
| `claude-flow` | 3.28.0 |
| `ruflo` | 3.28.0 |