Adjust store auth warning for non-canonical store domain

[dmerand]

What

Improve the shopify store auth callback-store mismatch error so it points the user at the permanent store domain Shopify returned during authentication.

Why

Some stores can start auth on one domain and return a different canonical .myshopify.com domain in the OAuth callback. Today that fails with a generic store-mismatch error, which makes it hard to tell whether the issue is an alias or vanity domain.

This change keeps the existing callback validation but makes the next step explicit.

How

• keep rejecting callbacks whose shop parameter does not match the requested store
• when Shopify returns a different store domain, include that returned domain in the error guidance
• tell the user to re-run shopify store auth with the permanent store domain instead of an alias or vanity domain

Testing

To test manually:

1. Run shopify store auth --store <alias-or-vanity-domain> --scopes read_products
2. Complete the PKCE flow until Shopify redirects back with a different canonical shop domain
3. Confirm the CLI error tells you which permanent store domain to retry with

Measuring impact

How do we know this change was effective? Please choose one:

• n/a - this doesn't need measurement, e.g. a linting rule or a bug-fix
• Existing analytics will cater for this addition
• PR includes analytics changes to measure impact

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes

[dmerand]

• Store auth/execute UX improvements #7151
• Adjust store auth warning for non-canonical store domain #7150 👈 (View in Graphite)
• Canonicalize scopes for store auth #7149
• Fix store auth API Client key #7148
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

We detected some changes at packages/*/src and there are no updates in the .changeset.
If the changes are user-facing, run pnpm changeset add to track your changes and include them in the next release CHANGELOG.

Caution

DO NOT create changesets for features which you do not wish to be included in the public changelog of the next CLI release.

[isaacroldan]

🎩 and works!