#2428 Remote indicator prints the full --server URL, including a ?token= query credential, to stderr

Problem

When a CLI command runs through a swamp serve server, writeRemoteIndicator in src/cli/remote_run.ts prints the server URL on stderr as the Remote line. It prints the value unchanged. Serve accepts a token as a query parameter, so a command run with --server 'http://host:9000/?token=[REDACTED-SECRET-1]' shows the token on stderr, where it can end up in CI logs, terminal scrollback, and screen shares. The same applies to userinfo in the URL (user:pass@host).

Reproduction

1. Start swamp serve.
2. Run any remote command with a token in the URL, for example: swamp workflow run my-workflow --server 'http://127.0.0.1:9000/?token=[REDACTED-SECRET-2]'
3. stderr shows the Remote line with ?token=[REDACTED-SECRET-3]

Found while writing swamp-uat coverage for swamp-club#2409. That change prints follow-up commands with the server URL stripped of userinfo, query string, and fragment (formatCommandTarget in src/cli/remote_run.ts). The Remote line predates it and does not strip them.

Expected

The Remote line shows the server without userinfo, query string, or fragment, like the printed follow-up commands do. The three writeRemoteIndicator call sites in src/cli/remote_run.ts could share the stripping helper.