20260922 对齐 OSS 验证配置并补充 public TOML E2E

docs/command-line-reference.md

@@ -89,6 +89,14 @@ path types without network access, directory creation, state writes or locks.
 `--print-config` emits `configVersion`, `mode`, `effective`, `sources` and
 `normalizations` as JSON; defaults are filled and paths are absolute.
 
+Strict validation, resource validation mode, validation time, RRDP/rsync
+preference and all rsync tuning are TOML settings, not business CLI options.
+Use `[strict]` plus the top-level `resource-validation-mode`,
+`validation-time`, `sync-preference`, `rsync-timeout-secs`, `rsync-command`,
+`rsync-mirror-root` and `rsync-scope` keys. `--print-config` exposes their
+effective values and sources; an omitted validation time is generated for the
+inspection and recaptured when an actual run starts.
+
 Validation writes `summary.json`, `vrps.csv`, `vaps.csv`, timing files and an
 optional CCR. The final `result-complete.json` is written only after all required
 artifacts are ready. `resultStatus` is `success`, `partial` or `failed`: