@stricli/core 1.2.7 patch: -H alias reserved-list removal

Trap: When Stricli throws on -H aliases used for --header or --host, removing the aliases from command files looks like the simple fix. But the project intentionally uses -H for curl-style API usage. Fix: the in-repo patch for @stricli/core (targeting 1.2.7) removes -H from the reserved list. Pin version to 1.2.7 (not ^1.2.8) so the patch applies. Never remove -H alias usages from command files. Added in commit 78c9b04a5. Cursor Bugbot and Seer both flag -H removal as blocking.