feat: sync CLI with dashboard@v1.6.23

[cursor]

Upstream version

• dashboard@v1.6.23 (SHA d3af99a5470df48b796318215a92a930dec3b30d)
• @photon-ai/dashboard-api bumped 1.6.12 → 1.6.23 (main is still pinned to 1.6.12 via merged PR fix: guard list commands against response shape changes #79; prior sync PRs feat: sync CLI with dashboard@v1.6.13 #78, feat: sync CLI with dashboard@v1.6.14 #83–feat: sync CLI with dashboard@v1.6.19 #88, feat: sync CLI with dashboard@v1.6.20 #90–feat: sync CLI with dashboard@v1.6.22 #94 have not merged, so this bump effectively catches main up to the latest published api-public)

Routes added/removed/changed

• Added: (none)
• Removed: (none)
• Changed: (none — no route surface changes)
• Non-route type refinement: CaptchaProvider union changed from "google-recaptcha" | "turnstile" to "hcaptcha" | "turnstile" (dashboard#272 hCaptcha rollout, first published in api-public with 1.6.23). Not referenced by any CLI code (rg -i 'CaptchaProvider|google-recaptcha|hcaptcha|captcha' src/ returns nothing), so no code impact.
• The v1.6.23 dashboard release itself is entirely server-side auth work: dashboard#273 (unblock hCaptcha-routed signup), #274 (hCaptcha rejection diagnostics), #275 (Continue-with-Google one-click registration). Zero CLI surface impact.
• Cumulative delta vs the last-merged 1.6.12 baseline: the 23 added / 1 removed route counts from UPSTREAM_DIFF.md on main were the 1.2.0→1.6.x delta and haven't grown since (all 1.6.13→1.6.23 bumps were no-op or auth-only additive on OTP routes the CLI doesn't call). See memory for per-version notes.

Snapshot changes

• (none)

New runtime dependencies

• (none)

Checklist

• API type changes come from a @photon-ai/dashboard-api version bump, not hand edits
• No new runtime deps
• All snapshot diffs explained above
• bun run check passes locally (90 tests pass, typecheck clean, build succeeds)

  

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}