chore: clear oxlint warnings, track auth-commands smoke test

Ran the full 'bun run lint' + 'bun run typecheck' + 'bunx vitest run' + 'bun run build' gauntlet after the prior commit and caught five findings I missed.

Fixed
- scripts/validation/proxy-capture.ts: drops the unused 'type TLSSocket'
  import. The file only uses the runtime tls.TLSSocket constructor.
- scripts/analysis/extract-fingerprint.ts: replaces the unnecessary
  '\-' escape in a character class with a plain '-'.
- src/cli/commands/auth.ts: removes the dead 'UsageFetchResult' type
  alias and its now-unused 'OAuthProfilePayload' import.
- tests/unit/cli/auth-commands.test.ts: tracks this previously
  untracked smoke test (2/2 tests pass under vitest) and replaces the
  oxlint-flagged 'typeof import(...)' type annotations with top-level
  'import type * as ConfigModule' / 'import type * as StorageModule'
  imports. Earlier sessions thought this file was broken; it runs
  clean under the real vitest runner.

Verification
- bun run lint: 0 warnings / 0 errors
- bun run typecheck: exit 0
- bunx vitest run: 70 files / 1283 tests, all pass
- bun run build: dist/opencode-anthropic-auth-plugin.mjs + cli.mjs
  built successfully