test(cli): add env-gated scenario integration tests

[zfarrell]

Closes #129. Adds binary-driven integration tests mirroring the shared scenario manifest, env-gated on HOTDATA_SDK_TEST_* so cargo test passes offline. Covers workspaces_list, connections_read, query_async_polling, results_arrow, auth_missing_token_401, auth_unknown_workspace; the CLI opts out of the rest via the manifest. Depends on hotdata-dev/www.hotdata.dev#213 — merge that first or the scenario-parity job will fail.

[sentry]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[claude]

super nit: the integration job is documented as fork-safe (skips cleanly when secrets are absent), but scenario-parity will hard-fail on PRs from forks — create-github-app-token errors out when HOTDATA_AUTOMATION_APP_ID / HOTDATA_AUTOMATION_PRIVATE_KEY aren't injected. If fork PRs are in scope, consider gating this job on github.event.pull_request.head.repo.fork == false (or a secret presence check) for consistency. If forks are out of scope for this internal tool, ignore. (not blocking)

[claude]

Clean, well-documented env-gated integration tests. JSON field assertions match src/, the skip-macro gating is sound, and the tests run-and-skip safely under the existing CI test job. One non-blocking super nit left inline re: parity job on fork PRs.