cli: reconcile --print-handoff deep-link with #1576 canonical format

[cliffhall]

Background

Surfaced in the @claude review of #1655 (the #1575 stored-auth suite). --print-handoff currently emits an interim deep-link shape — a hardcoded transport: "http" plus a non-standard autoConnect query form — because the canonical deep-link format is owned by #1576 (Wave 4), which was not yet implemented when #1575 landed. The interim shape is marked with a TODO(#1576) in code.

Scope

• Once web: deep-link auto-connect (?serverUrl&transport&autoConnect) + machine-readable connection status #1576 (web: deep-link auto-connect ?serverUrl&transport&autoConnect + machine-readable connection status) lands its canonical deep-link/query format, update --print-handoff to emit exactly that format.
• Remove the hardcoded transport: "http" assumption; derive transport from the resolved server.
• Drop the interim autoConnect form in favor of web: deep-link auto-connect (?serverUrl&transport&autoConnect) + machine-readable connection status #1576's canonical params.
• Update the CLI README and remove the TODO(#1576) marker.
• Add/adjust a test asserting the emitted handoff URL matches web: deep-link auto-connect (?serverUrl&transport&autoConnect) + machine-readable connection status #1576's format.

Dependencies

• Blocked on web: deep-link auto-connect (?serverUrl&transport&autoConnect) + machine-readable connection status #1576 (canonical deep-link format). This is the CLI-side follow-through of that work.

References

• TODO(#1576) in branch v2/1575-cli-stored-auth; declined/deferred item in cli: Wave 3 — programmatic review path (rollup of #1573–#1575) #1655 review.
• Part of the Tracking: re-implement PR #1510 (spec-conformant Apps host + programmatic review path) as scoped issues #1579 re-implementation effort (CLI lane → Wave 4 integration).

[cliffhall]

Implemented and reviewed to LGTM on its branch, then consolidated into the Wave 4 rollup #1676 (tracking #1675). Closing as done; the board card moves to Done. The change ships to v2/main when the rollup merges.