some tweaks for --debug mode

pass through to nested commands
ignore verify_clean if --debug and --pretend
only verify policy if verifying project

otherwise, commands that need to operate outside a project (e.g. add-project) couldn't possibly work inside a policy
allow --noaction, --dry-run, and -n to be aliases for --pretend