onelake-catalog-cli

1> **Telemetry — MANDATORY.** Every `api.fabric.microsoft.com` call must carry
2> `x-ms-fabric-skill: onelake-catalog-cli` (`az rest`: `--headers "x-ms-fabric-skill=onelake-catalog-cli"`),
3> including every LRO poll, `fabric_lro` and retry. Snippets omit it — add it anyway.
4 
5> **CRITICAL NOTES**
6> 1. To find the workspace ID from its name, one call: `az rest --method get --resource "https://api.fabric.microsoft.com" --url "https://api.fabric.microsoft.com/v1/workspaces" --query "value[?displayName=='<name>'] | [0].id" -o tsv` (follow `continuationToken` only if it isn't on the first page; details in [COMMON-CLI.md § Finding Workspaces and Items in Fabric](../../common/COMMON-CLI.md#finding-workspaces-and-items-in-fabric)).
7> 2. To find an item's ID, one call: the same on `.../v1/workspaces/{ws}/items?type=<Type>` with `--query "value[?displayName=='<name>'] | [0].id"`.
8> 3. **Write-gated skill** — never call a write API before its gate below has passed. For curation that means the owner reviewed **every** proposed change and explicitly confirmed — not even a "test" write to check whether a change is allowed or what is already applied.
9> 4. The item list and Get Item both return an item's `tags`. **An item with no tags has no `tags` field** — that absence means untagged.
10 
11# OneLake Catalog — CLI Skill (mode dispatcher)
12 
13One skill for the OneLake catalog. **Govern** (catalog health, protection and trust: audits and
14…