[eoghanriley]

Description

This PR splits uds bundle remove into two commands, following the split that was done with deploy. uds bundle remove handles artifacts while uds bundle dev remove handle hcl files and directories.

Related Issue

Fixes CLI-320

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Other (security config, docs update, etc)

Checklist before merging

• Test, docs, adr added or updated as needed
• Contributor Guide Steps followed

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no outstanding correctness, security, or repository-rule violations identified.

Summary

• Adds uds bundle dev remove for local HCL bundle definitions.
• Restricts uds bundle remove to local or OCI artifacts with signature-verification policy.
• Updates removal tests, integration helpers, command guidance, and documentation.
• Corrects the malformed replacement command identified during the previous review.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  U[User] --> S{Removal source}
  S -->|HCL file or directory| D[uds bundle dev remove]
  S -->|tar.zst or OCI reference| A[uds bundle remove]
  D --> W[Warn that provenance and signature verification are unavailable]
  A --> V[Apply artifact signature-verification policy]
  W --> R[Validate dependencies and remove packages]
  V --> R

Loading

[chance-coleman]

Looking good, two smaller comments and i'd be happy to approve.

[joelmccoy]

LGTM - i added a comment to reduce some code duplication, you can take it or leave it