Migrate `spo listitem` commands to Zod

Part of #6807

Commands to migrate:

• spo listitem add
• spo listitem attachment add
• spo listitem attachment get
• spo listitem attachment list
• spo listitem attachment remove
• spo listitem attachment set
• spo listitem batch add
• spo listitem batch remove
• spo listitem batch set
• spo listitem get
• spo listitem isrecord
• spo listitem list
• spo listitem record declare
• spo listitem record lock
• spo listitem record undeclare
• spo listitem record unlock
• spo listitem remove
• spo listitem retentionlabel ensure
• spo listitem retentionlabel remove
• spo listitem roleassignment add
• spo listitem roleassignment remove
• spo listitem roleinheritance break
• spo listitem roleinheritance reset
• spo listitem set

Start with the migration plan in #6807, then locate the implementations for the listed spo listitem commands. Work through the checklist, beginning with one command to understand the existing patterns. Done means all listed commands use Zod while retaining their current behavior.