fix(cli): sanitize terminal output

[zoya-brd]

No description provided.

[artemo-brd]

Please fix the items below:

• Incomplete coverage. print() is sanitized, but print_table() still writes API-controlled values directly via console.log(). (e.g. discover titles and URLs). Please audit other direct console.log/error and stdout/stderr.write paths, and sanitize untrusted values before applying CLI styling (e.g. success/warn/info/fail functions).

• Do not sanitize non-TTY stdout. The current change makes -o file preserve escapes while > file and pipes strip them, potentially corrupting raw/CSV/MD/HTML output. Sanitize only when is_tty. Please also transform is_tty to function (const is_tty = () => process.stdout.isTTY === true;) because currently it's not a live check and tests can't flip it after import. This constant is used in other files (spinner.ts, discover.ts, scraper.ts), so it needs to be updated there as well.

• Add tests for:

1. sanitized TTY output
2. preserved piped/redirected output
3. malicious values passed through print_table()

Also stripVTControlCharacters() doesn't handle standalone controls such as \r, \b, \x07.
Suggested:

const sanitize_terminal = (value: string): string =>
    stripVTControlCharacters(value)
        .replace(/\r\n?/g, '\n')
        .replace(/[\x00-\x08\x0B-\x1F\x7F-\x9F]/g, '');

Normalize carriage return before applying the character class.
In print_table(), sanitize and flatten cells before computing widths to not break table alignment.