feat(cli): default to the single-port cp and cas hostnames

MI
1h ago
+250-248

The CLI now uses the single-port hostnames by default: cp.chainloop.dev:443 for the control plane and cas.chainloop.dev:443 for the Artifact CAS. Since v1.126.0, these endpoints serve gRPC and HTTP on one port (#3628).

The docs, examples and sandbox egress rules that named the old api.cp.chainloop.dev and api.cas.chainloop.dev hostnames now use the new ones. These include the CLI reference, the CLI and Dagger READMEs, the OpenAPI download examples, and the sandbox kit's NO_PROXY and egress allow list.

The new hostnames must serve native gRPC before a CLI release ships with these defaults.

Related: #3628

AI assistance: this change was prepared with Claude Code.