feat(cli): add named color themes and rich-formatted help

Render all click help through rich-click, themed by a new `theme` config key (9 palettes + aliases, previewable via `unshackle env theme`), and show service docstrings in local and remote `dl <TAG> -h`.

docs/reference/configuration/index.md

@@ -38,5 +38,6 @@ Where the file lives, how unshackle discovers it, and how to edit it:
 | [Key vaults](vaults.md) | `key_vaults`, `vault_timeout` |
 | [External API keys](misc.md#external-api-keys) | `omdb_api_key`, `tmdb_api_key`, `tvdb_api_key`, `tvdb_pin`, `tvdb_order`, `simkl_client_id`, `metadata_providers`, `anilist_title_language`, `disable_metadata`, `decrypt_labs_api_key`, `ipinfo_api_key` |
 | [Caching & updates](misc.md#caching-updates) | `title_cache_enabled`, `title_cache_time`, `title_cache_max_retention`, `update_checks`, `update_check_interval` |
+| [Appearance](misc.md#appearance) | `theme` |
 | [Logging, privacy & debug](misc.md#logging-privacy-debug) | `redact_paths`, `debug`, `debug_keys`, `debug_requests`, `set_terminal_bg` |
 | [Deprecated & removed](misc.md#deprecated-removed-keys) | `curl_impersonate`, `downloader`, `scene_naming` |

docs/reference/configuration/misc.md

@@ -141,6 +141,14 @@ calls.
 
 ---
 
+## Appearance { #appearance }
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| `theme` | str | `catppuccin-mocha` | Named colour theme for all CLI output: banner, logs, progress bars, and help screens. One of `catppuccin-mocha` (aliases `default`, `catppuccin`, `mocha`), `dracula`, `nord`, `gruvbox`, `one-dark` (alias `onedark`), `tokyo-night` (alias `tokyonight`), `monokai`, `flexoki`, `solarized-dark` (alias `solarized`). Case-insensitive; underscores work in place of hyphens. Unknown names fall back to the default with a warning. Preview them all with `unshackle env theme`. |
+
+---
+
 ## Logging, privacy & debug { #logging-privacy-debug }
 
 | Key | Type | Default | Description |

docs/reference/configuration/services.md

@@ -95,7 +95,9 @@ not repeated in the fallbacks, so `auth_headers: ["Authorization", "x-secret-key
 
 In `--remote` mode unshackle turns the server's service list into synthetic CLI
 commands that run against it, falling back to the tags in that `services` sub-dict when the
-list cannot be fetched. See [remote sessions](../../dev/rest-api/remote-sessions.md) for the
+list cannot be fetched. Each synthetic command carries the server-side service's options and
+documentation, so `unshackle dl --remote <TAG> -h` shows the same help text as it does on the
+server. See [remote sessions](../../dev/rest-api/remote-sessions.md) for the
 full setup.
 
 ## `serve`