Use standard help handling for the version command

docs/cli.md

@@ -30,8 +30,9 @@ overlay is loaded beside the main file, not used to locate profile files.
 `audita version` prints `audita <version>` and a newline to stdout, with no
 application configuration or provider setup. It returns `0` on success with
 empty stderr. `help version`, `version -h`, and `version --help` print command
-usage to stdout and return `0`; unexpected arguments and unknown flags return
-`2` with a usage error on stderr. The command uses ReleaseKit's public
+usage to stdout and return `0`. Help follows standard flag parsing and can
+short-circuit trailing arguments. Other invalid invocations return `2` with a
+usage error on stderr. The command uses ReleaseKit's public
 `buildinfo.Version()` accessor. It reports an injected release identifier when
 present, otherwise the executable's main-module version when available and not
 `(devel)`, and `dev` when neither source provides a release identifier.

docs/roadmap/remediation.md

@@ -4,8 +4,8 @@
 `3c405f0524ec6c098d00d4e371abbace7648d446`.
 **Scope:** ReleaseKit adoption commits after `721365e`, including CLI version
 reporting, local release wiring, CI delivery, tests, and documentation.
-**Status:** Findings pending remediation; no implementation changes made by this
-review.
+**Status:** R1 addressed; R2–R3 pending. The findings below describe the reviewed
+baseline; completed work is recorded under Resolution Record.
 
 ## Architecture Assessment
 
@@ -128,3 +128,11 @@ matrix.
   deployment work rather than an implementation finding or source-release gate.
 - No tags, pushes, hosted uploads, or LLM calls were made. Remediation should
   remain bounded to the findings above and add no new release gates.
+
+## Resolution Record
+
+- **R1:** The version command now uses one standard flag-parsing path. Successful
+  help is written once to stdout, with no stderr usage, and help can short-circuit
+  trailing arguments. Non-help usage errors retain status `2`. Regression tests
+  reproduced both defects before the fix; `go test ./internal/cli ./cmd/audita`
+  passed afterward. The CLI contract reflects ordinary help behavior.