[cdalar]

Summary

• fc: always record BaseImagePath at Deploy (it was only set when hashing the base image succeeded). Diff export still keys off BaseImageSHA256, so an unhashed path is never diffed against.
• ch: record BaseImagePath too.
• Both surface it as Vm.BaseImage, so onctl ls -o json says which base image a VM was cloned from (Image is the VM's own per-VM copy).

Needed by boxctl-vms to return each box's image name (boxctl ls IMAGE column).

Test plan

• go test ./pkg/cloud/ (updated the identity-failure test: path is now recorded, SHA still empty)
• go test ./cmd/ has two failures (TestReadConfig_NoConfigDirectory, TestCreateFlagsBindToViper) that also fail on main locally — not from this change

🤖 Generated with Claude Code

https://claude.ai/code/session_01Jek343oi27jMbwBi9depxo

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 34.56%. Comparing base (0e0c6de) to head (a25d63d).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1141      +/-   ##
==========================================
+ Coverage   34.54%   34.56%   +0.02%     
==========================================
  Files          51       51              
  Lines        5610     5612       +2     
==========================================
+ Hits         1938     1940       +2     
  Misses       3672     3672              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.