feat(cli): make cost display optional

[ianw-oai]

Summary

Scan logs show dollar estimates even when the user did not request them. Hide these estimates by default. Show them with --show-cost or when a cost limit is set.

Changes

• Add --show-cost to scan, scan-components, scans resume, and scans rerun. The default is false.
• Apply the setting to the dashboard, progress, summary, and verbose diagnostics.
• Always show estimates for command-line, configured, and saved cost limits.
• Update help and tests.

Testing

• Focused CLI, component, dashboard, and configuration tests: 286 passed.
• pnpm run types: passed.
• pnpm run format: passed.
• git diff --check: passed.
• pnpm run test --seed 12345: 2,973 passed, 57 skipped, zero failures.
• pnpm run test: 2,973 passed, 57 skipped, zero failures (seed 697217947).

Risk and rollout

This changes the default text output. Use --show-cost to restore dollar estimates. Token counts, cost tracking, cost limits, and saved/JSON data remain unchanged. No migration is required.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-09-11T05:25:15.181195Z	99bd1bc	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.