Add shared primary diagnostic sink for DEBUG-persistent run logs

[codeforester]

Summary: when BASE_CLI_PRIMARY_LOG is set, append the DEBUG-level Bash diagnostic stream to the shared primary log while preserving terminal verbosity. Acceptance: best-effort 0600-compatible sink, no terminal behavior change, tests for hidden DEBUG persistence, and documentation of the environment contract.