fix(credentials): address gosec and errcheck lint warnings

- Check read byte count before accessing buffer to fix G602 gosec warnings
- Explicitly discard term.Restore error to fix errcheck warning

Author: sbs44

internal/utils/credentials/input.go

@@ -17,7 +17,7 @@ func PromptMaskedWithAsterisks(stdin *os.File) (string, error) {
 	if err != nil {
 		return "", fmt.Errorf("failed to set raw terminal: %w", err)
 	}
-	defer term.Restore(fd, oldState)
+	defer func() { _ = term.Restore(fd, oldState) }()
 	return readMaskedInput(stdin, os.Stderr)
 }
 
@@ -27,13 +27,17 @@ func readMaskedInput(r io.Reader, echo io.Writer) (string, error) {
 	var buf []byte
 	b := make([]byte, 1)
 	for {
-		if _, err := r.Read(b); err != nil {
+		n, err := r.Read(b)
+		if err != nil {
 			fmt.Fprint(echo, "\r\n")
 			if err == io.EOF {
 				return string(buf), nil
 			}
 			return "", fmt.Errorf("failed to read input: %w", err)
 		}
+		if n == 0 {
+			continue
+		}
 		switch {
 		case b[0] == 3: // Ctrl+C
 			fmt.Fprint(echo, "\r\n")