fix(setup-gcp): filter scope output to https:// lines

Address review feedback: ts-node stderr (Node deprecation warnings, etc.)
was captured into SCOPES_OUTPUT via 2>&1 and would have been surfaced to
the user as bogus OAuth scopes. Filter on the https:// prefix instead, and
fail loudly if filtering leaves zero scopes.

Author: allenhutchison

scripts/setup-gcp.sh

@@ -104,10 +104,19 @@ if [ $? -ne 0 ]; then
 fi
 
 SCOPES=()
+# Filter to https:// lines so any Node/ts-node warnings written to stderr
+# (captured via 2>&1 above so we can surface them on failure) don't end up
+# in the user-visible scope list.
 while IFS= read -r line; do
-    [ -n "$line" ] && SCOPES+=("$line")
+    [[ "$line" == https://* ]] && SCOPES+=("$line")
 done <<< "$SCOPES_OUTPUT"
 
+if [ ${#SCOPES[@]} -eq 0 ]; then
+    echo -e "${RED}Error: print-scopes.ts produced no scope output.${NC}"
+    echo "$SCOPES_OUTPUT"
+    exit 1
+fi
+
 for scope in "${SCOPES[@]}"; do
     echo -e "     ${GREEN}$scope${NC}"
 done