docs/execution-model.md: command list has a phantom command and is missing 4 real commands

[codeforester]

Problem

docs/execution-model.md's "canonical... shipped public surface" command list (lines 170-194) has drifted from the real basectl command set in both directions:

• Phantom entry: line 177 lists base_std_run, which is not a real basectl subcommand. Confirmed: ./bin/basectl base_std_run --help returns ERROR: Unrecognized command: base_std_run.
• Missing real commands: the list omits four commands that basectl --help shows as real top-level commands: trust, ci, devcontainer, devenv-report.

Why this matters

This is meant to be the canonical shipped-surface list in the doc that specifically documents Base's runtime and dispatch contract -- a phantom entry and four missing real commands undermine exactly the claim the list is making.

Related: #1606 (open) proposes a canonical command-metadata source specifically to prevent this class of drift across help/dispatch/completions/docs. That's a longer-term architectural fix; this issue is the concrete, current instance of the problem in this specific doc and can be fixed independently of whether/when #1606 lands.

Proposed change

Remove base_std_run from the list and add trust, ci, devcontainer, and devenv-report.

Acceptance criteria

• docs/execution-model.md's command list matches basectl --help's actual top-level command set exactly.