feat(cli): load project from .chainloop.yaml

[waveywaves]

Summary

• Allow chainloop attestation init to load the project name from .chainloop.yaml when --project is omitted.
• Preserve precedence: CLI flag over repository configuration.

Fixes #3063

Assisted-by: pi

[cubic-dev-ai]

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="app/cli/cmd/config.go">

<violation number="1" location="app/cli/cmd/config.go:165">
P2: Added `.chainloop` `organization` field is unused, causing a silent no-op that can mislead users.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review, or fix all with cubic.}

[cubic-dev-ai]

P2: Added .chainloop organization field is unused, causing a silent no-op that can mislead users.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At app/cli/cmd/config.go, line 165:

<comment>Added `.chainloop` `organization` field is unused, causing a silent no-op that can mislead users.</comment>

<file context>
@@ -161,4 +161,6 @@ func isDir(filename string) bool {
 type DotChainloopConfig struct {
 	ProjectVersion string `yaml:"projectVersion"`
+	Project        string `yaml:"project"`
+	Organization   string `yaml:"organization"`
 }
</file context>

[waveywaves]

@migmartri @jiparis Ready for review. Extends .chainloop.yaml to support a project field — same precedence pattern as projectVersion (CLI flag > config > default). Organization field left for follow-up due to gRPC connection lifecycle constraints. All commits GPG-signed.