fix(cli): preserve endpoint API failure diagnostics

[cursor]

Summary

• replace controlled endpoint API sys.exit(1) paths with diagnostic-carrying exits
• retain safe categorical reasons for endpoint-not-found, permission, and authentication failures in CLI telemetry
• add focused coverage for all three handled API error classes

Evidence

The 2026-08-20 14:00–2026-08-21 14:00 UTC export contained 14 current-version endpoints list failures reported only as 1. The list command has no local status-1 path; these failures come from the shared endpoint API error decorator, which already prints a safe diagnosis but discarded it before telemetry capture. No open PR or main-branch fix covered this shared decorator.

Tests

• endpoint and telemetry suites with Pydantic 2: 55 passed
• endpoint and telemetry suites with Pydantic 1: 55 passed
• Ruff lint and format checks
• Pyright on changed files

  

[broly-code-security-scanner]

Broly Security Scan

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.2) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Exploit Chains · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.