fix(cli): accept /api paths, positional env pairs, and hint at login on 401

[Metehan-Bicer]

Summary

Fixes three of the CLI problems in #1023: openship api no longer doubles the /api prefix, project env set accepts KEY=VALUE pairs as arguments, and project commands say to run openship login when the API answers 401.

Motivation

• api.ts always puts the path under /api, so openship api /api/projects/<id> (the path as the API routes name it) requested /api/api/projects/<id> and got 404 Not Found.
• project env set <id> FOO=bar failed with too many arguments for 'set'. Expected 1 argument but got 2., because the command only took pairs through --set.
• A project command without a valid token printed a bare Unauthorized. The server and service commands already say "Run openship login first."

Related issue

Fixes #1023. Point 4 (--local-path) is already explained in the option's help, so it isn't changed here.

Changes

• apps/cli commands/api.ts: a leading /api segment is stripped before the client adds its own (/api and /api/... only; /apis is left alone). /projects/x, projects/x and /api/projects/x now all request /api/projects/x.
• apps/cli commands/project.ts:
  • env set takes optional [pairs...], merged with --set and checked by the same parsePairs; --set works as before. The --secret help and the "Nothing to do" message mention the positional pairs.
  • On a 401, the project command's error path adds "Run openship login first."; other statuses print as before. Commands in project-management.ts and project-data.ts report through the shared fail() and are unchanged.
• apps/web content/docs/cli/reference/project/index.mdx: the generated reference for env set, matching the new --help (checked against the repo's generator).
• Tests: apps/cli/test/e2e/api.test.ts and apps/cli/test/e2e/project.test.ts.

Verification

# apps/cli
$ bun x vitest run test/e2e/api.test.ts test/e2e/project.test.ts
 Tests  23 passed (23)
# with the two source files reverted, four new tests fail:
#   api > does not double the /api prefix when the path already has it   (got http://api.test/api/api/projects/x)
#   project env set > accepts positional KEY=VALUE pairs the same as --set, and both together
#   project env set > rejects a malformed positional pair before sending a write
#   project auth errors > points at openship login when the API answers 401   (got "  Unauthorized\n")

$ bun x vitest run
 Tests  718 passed (718)

$ bun run --cwd apps/cli lint   # clean

Against a local API (apps/api on port 4400, a project created with project create --local-path …):

$ openship api /api/projects/<id>
before: 404 Not Found
after:  { "data": { "id": "<id>", … } }

$ openship project env set <id> FOO=bar --set BAZ=qux
before: error: too many arguments for 'set'. Expected 1 argument but got 2.
after:  Updated env (production): 2 upserted, 0 deleted   (env get lists FOO and BAZ)

$ openship project list   # API with OPENSHIP_AUTH_MODE=local, no token
before: Unauthorized
after:  Unauthorized
        Run `openship login` first.

project.ts, project.test.ts and the docs page already have Prettier drift upstream. The two changed lines in project.ts keep that file's one-line style (the upserts line was already this long), so I didn't run bun format over them.

Checklist

• One change per PR — one bug, or one agreed feature, with nothing unrelated bundled in (the three CLI problems reported together in [Bug]: CLI misleading errors: bare Unauthorized, env set syntax, undiscoverable api paths, --local-path false "Directory not found" #1023)
• The diff is scoped — no reformatting or lint fixes on lines I wasn't otherwise changing
• A test fails without this change and passes with it (or I explained above why there isn't one)
• bun run test, bun run --cwd <workspace> lint, and bun format all pass locally (CLI tests and lint pass; see the Prettier note above)
• I understand every line of this diff and can explain it in review

[Hydralerne]

Great, thank you