Add read-only profiles

CLI profiles now support --read-only flag to restrict operations to GET requests only, preventing accidental writes.