feat(beacon): add secondary beacon support for upstream cap discovery
readBeaconSet() is the new shared abstraction for beacon matching.
All reading commands (skim, vet, remix, vouch, scan) use it instead
of inline === comparisons. init --secondary stores the upstream
beacon. explore API accepts comma-separated beacons with IN queries.