feat: list source resources and prompts

docs/current_roadmap.md

@@ -119,6 +119,9 @@ auth admin are implemented. The next work is polish, not new broad surfaces.
 - Completed `wf.source.read_resource`: resource refs are inert pass-by-value
   data using `logical_source`; explicit platform helper nodes dereference them
   through runtime/platform context with bounded output.
+- Completed source inventory CLI polish: `wf source resources` and
+  `wf source prompts` list source-owned resource/prompt names without fetching
+  content.
 - Active specs:
   - [`workflow config targets and sources`](superpowers/specs/2026-06-03-workflow-config-targets-and-sources.md)
   - [`store-backed source registry`](superpowers/specs/2026-06-03-store-backed-source-registry-design.md)

docs/wf_cli.md

@@ -137,6 +137,16 @@ exists, whether the auth scheme is compatible with the transport, catalog
 snapshot counts, and non-secret diagnostics. Secret payload values are never
 printed.
 
+List resource and prompt names exposed by a source:
+
+```bash
+wf --config wf.config.json source resources everything.default
+wf --config wf.config.json source prompts everything.default --format json
+```
+
+These commands read source inventory only. They do not fetch resource content or
+render prompts, which can be large or stateful upstream operations.
+
 ## Output Policy
 
 JSON is the default output format for every command.