AWS Credential Workspace Trust Checks

What: Added security checks to prevent AWS credential operations before workspace trust is confirmed

Details:

• Both awsAuthRefresh and awsCredentialExport settings now verify workspace trust before execution
• When these settings come from project or local configuration files, the system checks if the workspace has been explicitly trusted by the user
• If executed before trust confirmation, the system logs a security warning and reports telemetry
• Non-interactive sessions (-p mode) bypass these checks as they don't have interactive trust dialogs
• Evidence: Security check implementation at oH5() at line 438469 and tH5() at line 438512

Why this matters: Prevents malicious projects from triggering AWS credential refresh or export commands that could exfiltrate credentials before the user has reviewed and trusted the workspace.