test(init): fix maskToken property — exclude all-asterisk tokens from never-equals check

maskToken("*") must return "*" (the "short tokens are fully masked"
property requires all-asterisk output), which means the "output never
equals original input" property is unsatisfiable for inputs that are
already entirely asterisks. These two constraints are in fundamental
conflict for that edge case.

Fix: add a .filter() pre-condition to exclude all-asterisk tokens from
the never-equals property. Real auth tokens never consist entirely of
asterisks, so this doesn't weaken the practical guarantee.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: betegon

test/lib/sentryclirc-import.property.test.ts

@@ -132,11 +132,18 @@ describe("property: maskToken", () => {
   });
 
   test("output never equals the original input", () => {
+    // Tokens that are entirely asterisks are already fully masked, so
+    // maskToken cannot meaningfully change them — exclude that edge case.
     fcAssert(
-      property(string({ minLength: 1, maxLength: 100 }), (token) => {
-        const masked = maskToken(token);
-        expect(masked).not.toBe(token);
-      }),
+      property(
+        string({ minLength: 1, maxLength: 100 }).filter(
+          (t) => !/^\*+$/.test(t)
+        ),
+        (token) => {
+          const masked = maskToken(token);
+          expect(masked).not.toBe(token);
+        }
+      ),
       { numRuns: DEFAULT_NUM_RUNS }
     );
   });