Recognize ssh:// template URLs in bundle init (#5891)

## Changes
`gitUrlPrefixes` in `libs/template/resolver.go` only recognized
`https://` and `git@`, which is incomplete relative to the [git URL
spec](https://git-scm.com/docs/git-clone#_git_urls). This adds `ssh://`
so `databricks bundle init` clones templates from SSH-transport URLs.
`git://`, `http://`, and `ftp[s]://` are deliberately excluded as
deprecated/insecure protocols.

Also renames `IsRepoUrl` to `IsGitRepoUrl` and simplifies it to return
directly on the first matching prefix.

## Why
Closes #5881: SSH-transport template URLs were not recognized and fell
through to the local-path reader. For non `git@` prefixed SSH URLs
customers could not use the command.

## Tests
Unit test `TestBundleInitIsGitRepoUrl` updated to cover the supported
(`https://`, `ssh://`, `git@`) and unsupported (`git://`, `http://`,
`ftp[s]://`, local paths) forms. No acceptance test exercises git-URL
detection.

_This PR was written by Claude Code._

Author: janniklasrose

.nextchanges/bundles/bundle-init-git-clone-url.md

@@ -0,0 +1 @@
+Recognize `ssh://` template URLs in `databricks bundle init` ([#5891](https://github.com/databricks/cli/pull/5891)).

libs/template/resolver.go

@@ -8,20 +8,22 @@ import (
 	"github.com/databricks/cli/libs/git"
 )
 
+// See https://git-scm.com/docs/git-clone#_git_urls for the set of supported
+// Git URL forms. We deliberately exclude deprecated/insecure protocols (git, http, ftp[s]).
 var gitUrlPrefixes = []string{
 	"https://",
+	"ssh://",
+	// recognize git@ without ssh:// protocol because this is very common
 	"git@",
 }
 
-func IsRepoUrl(url string) bool {
-	result := false
+func IsGitRepoUrl(url string) bool {
 	for _, prefix := range gitUrlPrefixes {
 		if strings.HasPrefix(url, prefix) {
-			result = true
-			break
+			return true
 		}
 	}
-	return result
+	return false
 }
 
 // ResolveReader resolves a template path/URL to a Reader (built-in, git or local)
@@ -30,7 +32,7 @@ func ResolveReader(templatePathOrUrl, templateDir, ref string) (Reader, bool) {
 		return tmpl.Reader, false
 	}
 
-	if IsRepoUrl(templatePathOrUrl) {
+	if IsGitRepoUrl(templatePathOrUrl) {
 		return NewGitReader(templatePathOrUrl, ref, templateDir, git.Clone), true
 	}
 

libs/template/resolver_test.go

@@ -100,12 +100,22 @@ func TestTemplateResolverForCustomPath(t *testing.T) {
 	assert.Equal(t, "/config/file", tmpl.Writer.(*defaultWriter).configPath)
 }
 
-func TestBundleInitIsRepoUrl(t *testing.T) {
-	assert.True(t, IsRepoUrl("git@github.com:databricks/cli.git"))
-	assert.True(t, IsRepoUrl("https://github.com/databricks/cli.git"))
-
-	assert.False(t, IsRepoUrl("./local"))
-	assert.False(t, IsRepoUrl("foo"))
+func TestBundleInitIsGitRepoUrl(t *testing.T) {
+	// Supported
+	assert.True(t, IsGitRepoUrl("git@github.com:databricks/cli.git"))
+	assert.True(t, IsGitRepoUrl("https://github.com/databricks/cli.git"))
+	assert.True(t, IsGitRepoUrl("ssh://user@company.ghe.com/databricks/cli.git"))
+
+	// Unsupported
+	assert.False(t, IsGitRepoUrl("git://github.com/databricks/cli.git"))
+	assert.False(t, IsGitRepoUrl("http://github.com/databricks/cli.git"))
+	assert.False(t, IsGitRepoUrl("ftp://github.com/databricks/cli.git"))
+	assert.False(t, IsGitRepoUrl("ftps://github.com/databricks/cli.git"))
+
+	// Not git repos
+	assert.False(t, IsGitRepoUrl("./local"))
+	assert.False(t, IsGitRepoUrl("foo"))
+	assert.False(t, IsGitRepoUrl("github.com/databricks/cli.git"))
 }
 
 func TestResolveReader(t *testing.T) {