Avoid printing sensitive store auth URLs

[dengjeffrey]

Summary

Prevent Shopify CLI from printing manual store authorization URLs that the caller has marked as sensitive.

Context

The Stripe-backed store:stripe-auth flow passes the signup JWT through the OAuth authorization URL as the signup query parameter.

The normal path opens that URL in the browser and does not print it. If the browser cannot be opened automatically, the fallback path previously printed the full manual URL to the terminal. That could expose the signup JWT in shell history, logs, screenshots, or CI output.

Implementation

• Adds a sensitive option to the manual auth URL presenter API.
• Marks the manual auth URL as sensitive at the call site when the store auth input includes signup.
• Suppresses the manual URL output when sensitive is true and shows safer guidance instead.

This keeps the sensitivity decision at the point where we know why the URL is sensitive, rather than having the presenter parse and infer sensitive query parameters after the fact.

Testing

pnpm vitest packages/store/src/cli/services/store/auth/result.test.ts packages/store/src/cli/services/store/auth/index.test.ts packages/store/src/cli/commands/store/stripe-auth.test.ts --run