#3544 @swamp/1password: item or vault names containing 'authorization' are misreported as auth failures

Problem

runOp in vault/1password/extensions/vaults/onepassword.ts classifies op failures by substring on the whole stderr. Any stderr containing authorization or authenticate becomes 1Password authentication failed, and any containing vault plus not found becomes a missing-vault error. That stderr includes the user-supplied item name, vault name and op:// URI.

So a missing or not-yet-visible item named for example jira-authorization produces "jira-authorization" isn't an item in the "Engineering" vault, which is reported as an authentication failure. The user sees a misleading auth error, and the read-after-write retry added for swamp-club #3181 never runs for that key.

Expected

Classification should not depend on substrings from names the user chose: match the op message patterns themselves (for example the item-not-found wording) before the auth and vault checks, or carry the raw stderr on a typed error.

Extension: @swamp/1password. Found by the verification reviews on the #3181 change.