feat: resolve dependencies in batch trust commands

docs/DESIGN.md

@@ -125,6 +125,9 @@ Refreshing package lists... done.
 ```
 
 Command grammar (one line, whitespace-separated tokens, each `N` is the number in brackets):
+Unknown tokens reject the line; nonexistent numbers report an error and are skipped.
+Consecutive `N+` commands and `*+` trust the selected dependency roots, recording
+other selected packages in their closures as dependencies regardless of input order.
 
 | token  | action                                                                    |
 |--------|---------------------------------------------------------------------------|
@@ -153,8 +156,8 @@ On AUR rows `N?`, `N+` and `Nx` act through pacman like on any installed package
 `pacman -Qi` with `<helper> -Sia PKG`; `N-` excludes the row through the helper's `--ignore`.
 
 Numbers are stable for the whole session (removed rows leave a gap, never renumber).
-All tokens of a line are validated first: an unknown token or a number that is not listed
-prints an error, runs nothing of that line and re-prompts. EOF on stdin aborts without
+Syntax is validated first; an unknown token rejects the line. Numbers that are not listed
+print an error and are skipped while the remaining commands run. EOF on stdin aborts without
 upgrading (exit 2) so a piped run can never upgrade by accident unless it sends an empty
 line. When purges leave no row at all, the session ends ("Nothing left to upgrade.", exit 0).