fix(surf-cli): route credentialed requests past response cache to isolate credentials

[mertcano]

Motivation

This PR ensures that credentialed HTTP requests in surf-cli correctly bypass the local disk response cache, preventing private responses from being improperly shared or leaked across distinct user credentials or local profiles[cite: 44, 45, 46].

Modifications

• Credential-Aware Transport Routing (cli/transport.go):
  • Implemented credentialAwareTransport to check outbound requests for Authorization, Proxy-Authorization, or Cookie headers[cite: 45].
  • Automatically routes requests carrying session/auth credentials directly through the uncached default transport while maintaining standard caching behavior for anonymous requests[cite: 45].
• Regression Testing (cli/transport_test.go):
  • Added TestCachedTransportDoesNotShareCredentialedResponses to verify that consecutive requests with differing bearer tokens hit the origin server independently rather than returning a cached response[cite: 46].

Checklist

• Format your code according to the Contributor Guide.
• Add unit tests as outlined in the Contributor Guide.
• Update documentation as needed, including docstrings or example tutorials.