`installCli()` used to look for the CLI source at a fixed path relative
to the plugin checkout: either `./HarborForge.Cli` or `../HarborForge.Cli`.
That breaks any install layout where the plugin lives on its own — the
script just logs "Skipping CLI installation" and returns. Same anti-
pattern installManagedMonitor had already fixed for the monitor binary.
Mirror the monitor flow:
1. git clone --depth 1 --branch <cliBranch> CLI_REPO_URL → /tmp/<dir>
2. go build -ldflags Version=<date>+<branch>-<sha> -o $openclaw/bin/hf
3. chmod 755 + delete tmp dir on success or failure
Adds `--cli-branch <name>` (default: main) for parity with --monitor-branch.
Also stamps the binary with a real version string (was 'dev' before this
patch) so `hf version` is informative for debugging.
