refactor(auth): delegate status + logout to @doist/cli-core/auth

[scottlovegrove]

Summary

Mirrors Doist/twist-cli#222 for outline-cli. Replaces the hand-rolled ol auth status and ol auth logout action handlers in src/commands/auth.ts with cli-core's attachStatusCommand / attachLogoutCommand registrars, against the same shared OutlineTokenStore instance attachLoginCommand already uses.

• ol auth status and ol auth logout gain --json / --ndjson for free from cli-core.
• Status payload (--json / --ndjson): {id, name, email, team, baseUrl, source}.
• Logout payload (--json): {ok: true}; --ndjson is silent (per the registrar contract).
• A 401 from auth.info now throws CliError('NO_TOKEN', …) with a "re-authenticate" hint, replacing the ad-hoc AUTH_VERIFICATION_FAILED path.
• No token at all → CliError('NOT_AUTHENTICATED', …).
• Added 'NO_TOKEN' to outline's local ErrorCode union (cli-core's AuthErrorCode only declares NOT_AUTHENTICATED).
• SKILL_CONTENT / skills/outline-cli/SKILL.md updated for the new --json / --ndjson flags.

Skipped vs twist-cli#222 — both intentional, since outline-cli has no keyring:

• No getLastStorageResult / getLastClearResult getters on the store.
• No onCleared warning hook on logout.
• No revokeToken hook (outline doesn't call /oauth/revoke today; out of scope).
• No dependency bump — already on @doist/cli-core@0.12.0, well above the 0.10.0 floor.

Test plan

• npm run type-check
• npm test — 127/127 across 17 files
• npm run build
• npm run format (oxfmt + oxlint via lefthook on commit)
• npm run check:skill-sync
• Manual: ol auth status (human + --json + --ndjson) against a real Outline instance
• Manual: ol auth status with an invalid OUTLINE_API_TOKEN → NO_TOKEN envelope
• Manual: ol auth status with no token at all → NOT_AUTHENTICATED envelope
• Manual: ol auth logout + ol auth logout --json round-trip
• Manual: full ol auth login → status → logout round-trip to confirm the shared store still works end-to-end

🤖 Generated with Claude Code

[doistbot]

This PR replaces the hand-rolled auth status and auth logout commands with their @doist/cli-core equivalents, bringing built-in machine-readable output and standardized error handling. While the delegation successfully reduces boilerplate and aligns the CLI with internal patterns, the strict reliance on the token store inadvertently breaks environment variable authentication. A few adjustments will help polish this up, including reverting the status command to properly support environment-based tokens, removing PII from the machine-readable payloads to comply with AI tooling standards, resolving minor type duplications and forced casts, and adding automated tests for the new output formats.

_{Share Feedback • Review Logs}