fix(auth): move auth guard inside try block and fix buildListCommand type

Move the auth check inside the try block so maybeRecoverWithHelp can
intercept AuthError when "help" is a positional arg. Previously the guard
fired before the try, so `sentry issue list help` while unauthenticated
would trigger a login prompt instead of showing the command help.

Also add `auth?: boolean` to buildListCommand's builderArgs type. The
spread to buildCommand already passed it through at runtime — the type
just wasn't reflecting it.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: betegon

src/lib/command.ts

@@ -570,14 +570,19 @@ export function buildCommand<
       throw err;
     };
 
-    if (requiresAuth && !isAuthenticated()) {
-      throw new AuthError("not_authenticated");
-    }
-
     // Iterate the generator using manual .next() instead of for-await-of
     // so we can capture the return value (done: true result). The return
     // value carries the final `hint` — for-await-of discards it.
+    //
+    // Auth guard is inside the try block so that maybeRecoverWithHelp can
+    // intercept the AuthError when "help" appears as a positional arg (e.g.
+    // `sentry issue list help`). Without this, the auth prompt would fire
+    // before the help-recovery path could show the command's help text.
     try {
+      if (requiresAuth && !isAuthenticated()) {
+        throw new AuthError("not_authenticated");
+      }
+
       const generator = originalFunc.call(
         this,
         cleanFlags as FLAGS,

src/lib/list-command.ts

@@ -464,6 +464,7 @@ export function buildListCommand<
     readonly func: ListCommandFunction<FLAGS, ARGS, CONTEXT>;
     // biome-ignore lint/suspicious/noExplicitAny: OutputConfig is generic but type is erased at the builder level
     readonly output?: OutputConfig<any>;
+    readonly auth?: boolean;
   },
   options?: ListCommandOptions
 ): Command<CONTEXT> {