shots capture: signed-in web apps (shots.capture.auth request with ${cred:}/${env:} references or storageState), shots login saves a demo sign-in to .storebound/auth.json (0600), expired-session warning, secrets and cookies masked

cli/data/flags.json

@@ -806,6 +806,12 @@
    "variant",
    "variants"
   ],
+  "shots login": [
+   "headless",
+   "out",
+   "timeout",
+   "url"
+  ],
   "shots record": [
    "concurrency",
    "device",
@@ -983,6 +989,7 @@
    "godot",
    "group",
    "halt",
+   "headless",
    "home",
    "hook",
    "icon",
@@ -1479,6 +1486,9 @@
   "shots jpeg": [
    "storebound shots jpeg [--q 92] [--lang en,tr] [--variant b | --variants]"
   ],
+  "shots login": [
+   "storebound shots login [--url <url>] [--out .storebound/auth.json] [--timeout 900]"
+  ],
   "shots record": [
    "storebound shots record [--lang en,tr] [--only intro,combo] [--source web|ios-sim|android-emu|folder] [--dry] [--keep-booted]"
   ],