fix(cursor): deprecate legacy bridge and harden gitlab auth

tests/unit/cursor/cursor-daemon.test.ts

@@ -321,7 +321,7 @@ describe('handleCursorCommand', () => {
 
       expect(exitCode).toBe(0);
       expect(errors).toHaveLength(0);
-      expect(logs.some((line) => line.includes('Cursor IDE Integration'))).toBe(true);
+      expect(logs.some((line) => line.includes('Legacy Cursor Compatibility'))).toBe(true);
       expect(logs.some((line) => line.includes('Usage: ccs cursor <subcommand>'))).toBe(true);
     } finally {
       console.log = originalLog;
@@ -471,7 +471,7 @@ describe('renderCursorStatus', () => {
 });
 
 describe('renderCursorHelp', () => {
-  it('shows bare ccs cursor as the runtime entrypoint', () => {
+  it('marks the legacy Cursor surface deprecated while keeping compatibility guidance', () => {
     const originalLog = console.log;
     const logs: string[] = [];
 
@@ -484,9 +484,16 @@ describe('renderCursorHelp', () => {
 
       expect(exitCode).toBe(0);
       expect(logs.some((line) => line.includes('Usage: ccs cursor <subcommand>'))).toBe(true);
+      expect(logs.some((line) => line.includes('Legacy Cursor Compatibility'))).toBe(true);
+      expect(logs.some((line) => line.includes('Deprecated: prefer CLIProxy-backed Cursor auth'))).toBe(
+        true
+      );
       expect(logs.some((line) => line.includes('probe     Run a live authenticated runtime probe'))).toBe(
         true
       );
+      expect(
+        logs.some((line) => line.includes('ccs cursor --auth'))
+      ).toBe(true);
       expect(
         logs.some((line) => line.includes('ccs cursor [claude args]'))
       ).toBe(true);