Fix the five resilience review findings

docs/cli.md

@@ -45,6 +45,8 @@ validation. The shared setting flags are:
 | Debug | `--debug[=true\|false]`, `--work-dir DIR` |
 
 `process` alone accepts `--glossary` (required) and `--output`.
+An omitted or empty output value selects stdout. Nonempty output filenames are
+used literally, including whitespace.
 Reporting defaults to enabled. `--reporting=false` disables all three ordinary
 reports; an explicit false overrides a true file or overlay setting. With file
 output, reports go beside the transcript and `--report-dir` has no effect. With