Make destructive CLI commands human-only with a TTY check

Coding agents run shell commands without a terminal attached (stdin/stdout are not TTYs), so a CLI can refuse sensitive commands like uninstall when process.stdin.isTTY && process.stdout.isTTY is false, printing an instruction for the person to run it themselves and exiting non-zero; the agent relays the message. Pair with a confirm prompt when a TTY is present. Signup gated by an emailed code or browser OAuth similarly guarantees a human consented. Limit: this is a guardrail, not security, since an agent can still edit or delete the files directly.