feat(cli): cover OpenAPI with a remote npm CLI and internal panel tools (#3074)

* feat(cli): add unified Commander CLI for QingLong 2.x

* fix(cli): publish via npm and address security review feedback

* ci(cli): package npm artifacts and remove evaluation collateral

* test(cli): use a fixed shell fixture for log retention

* refactor(cli): separate remote npm client from panel tools

* feat(cli): cover active panel OpenAPI resources

* docs(cli): unify authentication and skill guidance

* refactor(cli): isolate internal commands and generate Commander help

* refactor(cli): organize remote and internal modules by responsibility

* ci(cli): publish verified npm archives from master

* fix(cli): publish under the whyour npm scope

* ci: use npm trusted publishing for both packages

* docs: introduce the published CLI on the project homepage

* fix(cli): preserve server log truncation and correct login hints

* fix(cli): accept dashboard record request bodies

* fix(cli): preserve stdin for local task execution

* fix(cli): resolve task executables after changing directory

* fix(cli): preserve shell function tasks and sanitize test failures

* fix(cli): preserve shell hook state and resolve workdir after hooks

* fix(cli): preserve cleanup across shared shell task timeouts

* fix(cli): isolate shell control descriptors and reap timed-out descendants

cli/test/internal/botDiagnostics.test.cjs

@@ -0,0 +1,26 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+
+test('bot integration failure does not print environment-derived error details', async () => {
+  const messages = [];
+  const childProcess = { env: { QL_PANEL_INTEGRATION: '1', QL_CLIENT_SECRET: 'sensitive-marker' }, exitCode: 0 };
+  const source = fs.readFileSync(path.join(__dirname, '../linux/bot-install.cjs'), 'utf8');
+  vm.runInNewContext(source, {
+    process: childProcess,
+    console: { error: (message) => messages.push(message) },
+    require: (name) => {
+      if (name === 'node:fs/promises') return { mkdtemp: async () => '/fixture' };
+      if (name === '../../dist/internal/runtime/context') return { createContext: () => { throw new Error(childProcess.env.QL_CLIENT_SECRET); } };
+      if (name === '../../dist/internal/maintenance/bot') return {};
+      return require(name);
+    },
+  });
+  await new Promise((resolve) => setImmediate(resolve));
+  assert.equal(childProcess.exitCode, 1);
+  assert.equal(messages.length, 1);
+  assert.match(messages[0], /integration test failed/);
+  assert.doesNotMatch(messages[0], /sensitive-marker/);
+});