fix(cli): document gitlab shortcut flags and harden cursor routing

tests/npm/cli.test.js

@@ -99,6 +99,20 @@ describe('npm CLI', () => {
         assert(output.includes('Cursor Live Probe'), 'Should render the cursor probe command output');
       }
     });
+
+    it('routes gitlab --help to provider shortcut help instead of starting auth', function() {
+      const output = execSync(`bun "${srcCcsPath}" gitlab --help`, {
+        encoding: 'utf8',
+        timeout: 3000,
+        env: { ...process.env, CCS_HOME: testCcsHome }
+      });
+
+      assert(output.includes('CCS gitlab Shortcut Help'), 'Should render provider shortcut help');
+      assert(output.includes('--gitlab-token-login'), 'Should document canonical GitLab PAT flag');
+      assert(output.includes('--token-login'), 'Should document legacy GitLab PAT alias');
+      assert(output.includes('--gitlab-url <url>'), 'Should document self-hosted GitLab URL flag');
+      assert(!output.includes('Starting GitLab Duo OAuth'), 'Should not start OAuth when help is requested');
+    });
   });
 
   describe('Profile handling', () => {