Testing Auth Setup

Runs the Scalekit dryrun CLI to validate that your auth integration is correctly configured against a live environment.

Guardrails

MUST confirm SCALEKIT_ENVIRONMENT_URL and SCALEKIT_CLIENT_ID are set before running the dryrun command.
MUST ask for organization_id before running sso mode if it wasn't provided.
MUST show the dryrun output and explain what passed/failed in plain language, not just report success or failure silently.
MUST NOT guess between fsa and sso mode when it's ambiguous — ask the user which to use.

Mode	What it tests	When to use
`fsa`	Full-stack auth login flow	User is setting up or verifying login, callback, and session handling
`sso`	Enterprise SSO flow	User is setting up or verifying SAML/OIDC SSO with an identity provider