* refactor(cli): split capability commands by domain * fix(cli): keep capability metadata type private