feat(cli): aws sso login redirect on SSO-expired (TTY-gated)

[macalbert]

Description

After #1, offer to run aws sso login --profile X when an SsoSessionExpiredError is presented. CLI-only.

Acceptance Criteria

• Redirect only triggers on an interactive TTY (never in CI / non-interactive shells)
• Prompts before launching (Run aws sso login now? [y/N])
• Never part of any SDK
• Tests pass: pnpm test

Technical Notes

• See ADR-0010. TTY detection via process.stdout.isTTY.
• Depends on feat(cli): actionable SSO-expired error end-to-end (ADR-0010) #374 (typed error + presenter) — HARD dependency.

Message standards (ADR-0010 §5)

All user-facing text in this slice must meet the ADR-0010 message standards:

• Plain and direct ÔÇö written for a broad developer audience; no jargon or raw provider stack-trace noise
• Actionable step-by-step ÔÇö one-line problem + the exact steps to fix (e.g. aws sso login --profile <name>, then retry)
• Professional and calm on the failure path (no playful tone in errors)
• Keyword-anchored ÔÇö surfaces the profile name, the command to run, and the provider
• CLI formatted (colour/icon/layout) / SDK clean plain text without ANSI