fix(auth): avoid dumping HTML error pages in auth status

Stan Hurequested to merge
auth-status-html-error into main

Description

When an OAuth token endpoint returns a non-2XX response without a structured OAuth error (for example, an HTML 500 error page), the *oauth2.RetrieveError from golang.org/x/oauth2 embeds the entire response body in its error string. glab auth status printed this verbatim, flooding the terminal with unhelpful HTML markup that could obscure other instances' status.

Add a sanitizeAuthError helper that reports only the HTTP status for these body-only OAuth failures, while leaving structured OAuth errors and all other errors unchanged.

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com

Related Issues

Resolves #[issue_number]

How has this been tested?

Screenshots (if appropriate):

Edited by Stan Hu

Merge request reports