fix(cli): Write --output file on auth error early exit

[dcramer]

Adds writeEmptyRunLog() call to auth error catch blocks in both runSkills() and runConfigMode(), matching the pattern used by other early-exit paths (no skills matched, no files matched).

Previously, when verifyAuth() threw, the --output file was never written. Downstream consumers (sweep scripts, CI) that depend on the output file would fail or behave unexpectedly.

Automated fix for Warden finding find-warden-bugs-9fff8c6a (high, detected by find-warden-bugs).

Ref #212

This PR was auto-generated by a Warden Sweep (run cd745cc3).
The finding has been validated through automated deep tracing,
but human confirmation is requested as this is batch work.

[sentry-warden]

Auth error early exit skips JSON stdout output unlike other early exit paths

The auth error catch block calls writeEmptyRunLog() but does not check options.json and write content to stdout. All other early exit paths (no skills matched, no files matched, etc.) have a pattern: if (options.json) { const { content } = writeEmptyRunLog(...); process.stdout.write(content); }. This inconsistency means when --json is used with a failing auth, the output file is written but stdout remains empty, which can break downstream consumers expecting JSON output on stdout.

Verification

Read lines 379-389, 457-466, 646-658 confirming all other early exit paths check options.json and write to stdout. The auth catch block at lines 325-328 writes the file but skips the stdout output.

Suggested fix: Match the pattern used by other early exit paths: check options.json and write content to stdout if true.

Suggested change

	} catch (error: unknown) {
	reporter.error((error as WardenAuthenticationError).message);
	writeEmptyRunLog(repoPath ?? cwd, { traceId: getTraceId(), outputPath: options.output });
	return 1;
	if (options.json) {
	const { content } = writeEmptyRunLog(repoPath ?? cwd, { traceId: getTraceId(), outputPath: options.output });
	process.stdout.write(content);
	} else {
	writeEmptyRunLog(repoPath ?? cwd, { traceId: getTraceId(), outputPath: options.output });
	}

Identified by Warden find-warden-bugs · YJG-694